diff --git a/README.md b/README.md index cc59bbee3..6df1c443f 100644 --- a/README.md +++ b/README.md @@ -61,7 +61,7 @@ For more information, please look at each blueprint's README file. ## Cybersecurity Documentation -In addition to the IaC, Stellar Engine provides supporting documentation that maps NIST 800-53r5 controls for users leveraging the IaC. This documentation is designed to streamline achieving ATO by providing generalized templates. All documentation is provided [here](https://drive.google.com/drive/folders/1NeWZcOuxysi7kUNRCFDd8CeHnxF14ywp). For how to utilize these documents, please see the following [Path to Authorization](docs/path-to-authorization.md) guide. +In addition to the IaC, Stellar Engine provides supporting documentation that maps NIST 800-53r5 controls for users leveraging the IaC. This documentation is designed to streamline achieving ATO by providing generalized templates. All documentation can be requested [here](https://forms.gle/zdv7Gip4opmdhBqk7). For how to utilize these documents, please see the following [Path to Authorization](docs/path-to-authorization.md) guide. ## Detailed Deployment Guide diff --git a/docs/artifacts/PIA-PCIL-SORN/DD_Form_2930_June_2017.pdf b/docs/artifacts/PIA-PCIL-SORN/DD_Form_2930_June_2017.pdf new file mode 100644 index 000000000..58b419b1d Binary files /dev/null and b/docs/artifacts/PIA-PCIL-SORN/DD_Form_2930_June_2017.pdf differ diff --git a/docs/artifacts/PIA-PCIL-SORN/NIST_SP_800_122.pdf b/docs/artifacts/PIA-PCIL-SORN/NIST_SP_800_122.pdf new file mode 100644 index 000000000..acd1f61cb Binary files /dev/null and b/docs/artifacts/PIA-PCIL-SORN/NIST_SP_800_122.pdf differ diff --git a/docs/artifacts/categorization-references/DCSA/DAAPM_Verson_1_3_4JUN2018.pdf b/docs/artifacts/categorization-references/DCSA/DAAPM_Verson_1_3_4JUN2018.pdf new file mode 100644 index 000000000..e13bf294e Binary files /dev/null and b/docs/artifacts/categorization-references/DCSA/DAAPM_Verson_1_3_4JUN2018.pdf differ diff --git a/docs/artifacts/categorization-references/DCSA/DCSA_Assessment_and_ Authorization_Process_Manual_Version_2.1.pdf b/docs/artifacts/categorization-references/DCSA/DCSA_Assessment_and_ Authorization_Process_Manual_Version_2.1.pdf new file mode 100644 index 000000000..e035c3d21 Binary files /dev/null and b/docs/artifacts/categorization-references/DCSA/DCSA_Assessment_and_ Authorization_Process_Manual_Version_2.1.pdf differ diff --git a/docs/artifacts/categorization-references/DCSA/DoD_SAP_PM_Handbook_JSIG_RMF_2015Aug11.pdf b/docs/artifacts/categorization-references/DCSA/DoD_SAP_PM_Handbook_JSIG_RMF_2015Aug11.pdf new file mode 100644 index 000000000..4c6af6955 Binary files /dev/null and b/docs/artifacts/categorization-references/DCSA/DoD_SAP_PM_Handbook_JSIG_RMF_2015Aug11.pdf differ diff --git a/docs/artifacts/categorization-references/DCSA/RMF_FAQ_APRIL_2017.docx b/docs/artifacts/categorization-references/DCSA/RMF_FAQ_APRIL_2017.docx new file mode 100644 index 000000000..0a6b630b9 Binary files /dev/null and b/docs/artifacts/categorization-references/DCSA/RMF_FAQ_APRIL_2017.docx differ diff --git a/docs/artifacts/categorization-references/DCSA/SAP_RMF_Checklist_17Nov2017.docx b/docs/artifacts/categorization-references/DCSA/SAP_RMF_Checklist_17Nov2017.docx new file mode 100644 index 000000000..37669b0d4 Binary files /dev/null and b/docs/artifacts/categorization-references/DCSA/SAP_RMF_Checklist_17Nov2017.docx differ diff --git a/docs/artifacts/categorization-references/DHA/DHA RMF Process Workflow_Public v8.3 Feb 22.pdf b/docs/artifacts/categorization-references/DHA/DHA RMF Process Workflow_Public v8.3 Feb 22.pdf new file mode 100644 index 000000000..96ca1e478 Binary files /dev/null and b/docs/artifacts/categorization-references/DHA/DHA RMF Process Workflow_Public v8.3 Feb 22.pdf differ diff --git a/docs/artifacts/categorization-references/DHA/DHAAI 077.pdf b/docs/artifacts/categorization-references/DHA/DHAAI 077.pdf new file mode 100644 index 000000000..a1f5fff77 Binary files /dev/null and b/docs/artifacts/categorization-references/DHA/DHAAI 077.pdf differ diff --git a/docs/artifacts/categorization-references/DON/5239.3 for navy.pdf b/docs/artifacts/categorization-references/DON/5239.3 for navy.pdf new file mode 100644 index 000000000..e3cdf1cbb Binary files /dev/null and b/docs/artifacts/categorization-references/DON/5239.3 for navy.pdf differ diff --git a/docs/artifacts/categorization-references/DON/8510.01_July2022.pdf b/docs/artifacts/categorization-references/DON/8510.01_July2022.pdf new file mode 100644 index 000000000..4eb06dc74 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/8510.01_July2022.pdf differ diff --git a/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).pdf b/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).pdf new file mode 100644 index 000000000..5fd5617f8 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).pdf differ diff --git a/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).xlsx b/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).xlsx new file mode 100644 index 000000000..7696236d1 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/DON_Information_Types_Baselines_25_MAR_2019(Minor_Update_FOUO).xlsx differ diff --git a/docs/artifacts/categorization-references/DON/IATT Test Plan Template v2.1.docx b/docs/artifacts/categorization-references/DON/IATT Test Plan Template v2.1.docx new file mode 100644 index 000000000..0d49d14d1 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/IATT Test Plan Template v2.1.docx differ diff --git a/docs/artifacts/categorization-references/DON/IATT Urgent Deploy and Test Template v1.1.docx b/docs/artifacts/categorization-references/DON/IATT Urgent Deploy and Test Template v1.1.docx new file mode 100644 index 000000000..3991fb391 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/IATT Urgent Deploy and Test Template v1.1.docx differ diff --git a/docs/artifacts/categorization-references/DON/IT Systems Checklist Oct 2020.xlsx b/docs/artifacts/categorization-references/DON/IT Systems Checklist Oct 2020.xlsx new file mode 100644 index 000000000..d5cafbf17 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/IT Systems Checklist Oct 2020.xlsx differ diff --git a/docs/artifacts/categorization-references/DON/MCBul 3967 DTD 12 JAN 2021 (SECURED).pdf b/docs/artifacts/categorization-references/DON/MCBul 3967 DTD 12 JAN 2021 (SECURED).pdf new file mode 100644 index 000000000..39785b259 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/MCBul 3967 DTD 12 JAN 2021 (SECURED).pdf differ diff --git a/docs/artifacts/categorization-references/DON/NIST 800-53 r4 - Security Control Selection Spreadsheet 20160927.xlsm b/docs/artifacts/categorization-references/DON/NIST 800-53 r4 - Security Control Selection Spreadsheet 20160927.xlsm new file mode 100644 index 000000000..a40d7fd9a Binary files /dev/null and b/docs/artifacts/categorization-references/DON/NIST 800-53 r4 - Security Control Selection Spreadsheet 20160927.xlsm differ diff --git a/docs/artifacts/categorization-references/DON/Navy Conventional IT RMF Workflow V1.2_200611.pdf b/docs/artifacts/categorization-references/DON/Navy Conventional IT RMF Workflow V1.2_200611.pdf new file mode 100644 index 000000000..f5aaee947 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/Navy Conventional IT RMF Workflow V1.2_200611.pdf differ diff --git a/docs/artifacts/categorization-references/DON/Navy Enterprise Inheritance Guide v1.0.pdf b/docs/artifacts/categorization-references/DON/Navy Enterprise Inheritance Guide v1.0.pdf new file mode 100644 index 000000000..25eec2081 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/Navy Enterprise Inheritance Guide v1.0.pdf differ diff --git a/docs/artifacts/categorization-references/DON/Navy RMF_Security_Assessment_Plan_Template v3.xlsx b/docs/artifacts/categorization-references/DON/Navy RMF_Security_Assessment_Plan_Template v3.xlsx new file mode 100644 index 000000000..8e5924e5a Binary files /dev/null and b/docs/artifacts/categorization-references/DON/Navy RMF_Security_Assessment_Plan_Template v3.xlsx differ diff --git a/docs/artifacts/categorization-references/DON/OPNAVINST_5239.1E_17NOV2023.pdf b/docs/artifacts/categorization-references/DON/OPNAVINST_5239.1E_17NOV2023.pdf new file mode 100644 index 000000000..32993dd73 Binary files /dev/null and b/docs/artifacts/categorization-references/DON/OPNAVINST_5239.1E_17NOV2023.pdf differ diff --git a/docs/artifacts/categorization-references/DON/RMF Process Guide v4.pdf b/docs/artifacts/categorization-references/DON/RMF Process Guide v4.pdf new file mode 100644 index 000000000..1433a2dea Binary files /dev/null and b/docs/artifacts/categorization-references/DON/RMF Process Guide v4.pdf differ diff --git a/docs/artifacts/categorization-references/DON/USN RMF System Security Categorization Form v1.6.xlsx b/docs/artifacts/categorization-references/DON/USN RMF System Security Categorization Form v1.6.xlsx new file mode 100644 index 000000000..6fcaa405e Binary files /dev/null and b/docs/artifacts/categorization-references/DON/USN RMF System Security Categorization Form v1.6.xlsx differ diff --git a/docs/artifacts/categorization-references/Dept of VA/6500_6hbk10_doc.pdf b/docs/artifacts/categorization-references/Dept of VA/6500_6hbk10_doc.pdf new file mode 100644 index 000000000..831f3f14f Binary files /dev/null and b/docs/artifacts/categorization-references/Dept of VA/6500_6hbk10_doc.pdf differ diff --git a/docs/artifacts/categorization-references/Dept of VA/6517hbk16.pdf b/docs/artifacts/categorization-references/Dept of VA/6517hbk16.pdf new file mode 100644 index 000000000..575d1381c Binary files /dev/null and b/docs/artifacts/categorization-references/Dept of VA/6517hbk16.pdf differ diff --git a/docs/artifacts/categorization-references/Dept of VA/Directive_6500_24_Feb_2021.pdf b/docs/artifacts/categorization-references/Dept of VA/Directive_6500_24_Feb_2021.pdf new file mode 100644 index 000000000..45620999b Binary files /dev/null and b/docs/artifacts/categorization-references/Dept of VA/Directive_6500_24_Feb_2021.pdf differ diff --git a/docs/artifacts/categorization-references/Dept of VA/Handbook_6500_24_Feb_2021.pdf b/docs/artifacts/categorization-references/Dept of VA/Handbook_6500_24_Feb_2021.pdf new file mode 100644 index 000000000..d251c4212 Binary files /dev/null and b/docs/artifacts/categorization-references/Dept of VA/Handbook_6500_24_Feb_2021.pdf differ diff --git a/docs/artifacts/categorization-references/Dept of VA/VA_Notice_24-12_Update_to_Handbook_6500_6_22_Apr_24.pdf b/docs/artifacts/categorization-references/Dept of VA/VA_Notice_24-12_Update_to_Handbook_6500_6_22_Apr_24.pdf new file mode 100644 index 000000000..154846fc2 Binary files /dev/null and b/docs/artifacts/categorization-references/Dept of VA/VA_Notice_24-12_Update_to_Handbook_6500_6_22_Apr_24.pdf differ diff --git a/docs/artifacts/categorization-references/USA/ARN37506-AR_25-2-003-WEB-4.pdf b/docs/artifacts/categorization-references/USA/ARN37506-AR_25-2-003-WEB-4.pdf new file mode 100644 index 000000000..53ea404ee Binary files /dev/null and b/docs/artifacts/categorization-references/USA/ARN37506-AR_25-2-003-WEB-4.pdf differ diff --git a/docs/artifacts/categorization-references/USA/CNSSI_1253_2022.pdf b/docs/artifacts/categorization-references/USA/CNSSI_1253_2022.pdf new file mode 100644 index 000000000..5fe8a1fd9 Binary files /dev/null and b/docs/artifacts/categorization-references/USA/CNSSI_1253_2022.pdf differ diff --git a/docs/artifacts/categorization-references/USA/ERDC-CERL SR-19-5.pdf b/docs/artifacts/categorization-references/USA/ERDC-CERL SR-19-5.pdf new file mode 100644 index 000000000..f9ef801b6 Binary files /dev/null and b/docs/artifacts/categorization-references/USA/ERDC-CERL SR-19-5.pdf differ diff --git a/docs/artifacts/categorization-references/USAF/DAF ITCSC v8.4 Mar 2023.pdf b/docs/artifacts/categorization-references/USAF/DAF ITCSC v8.4 Mar 2023.pdf new file mode 100644 index 000000000..23275b726 Binary files /dev/null and b/docs/artifacts/categorization-references/USAF/DAF ITCSC v8.4 Mar 2023.pdf differ diff --git a/docs/artifacts/categorization-references/USMC/Attachment_15_MCSC_SIAT_RMF_Process_Guide_20160525.pdf b/docs/artifacts/categorization-references/USMC/Attachment_15_MCSC_SIAT_RMF_Process_Guide_20160525.pdf new file mode 100644 index 000000000..ab8bf4db5 Binary files /dev/null and b/docs/artifacts/categorization-references/USMC/Attachment_15_MCSC_SIAT_RMF_Process_Guide_20160525.pdf differ diff --git a/docs/artifacts/categorization-references/USMC/MCO 5239.2B.pdf b/docs/artifacts/categorization-references/USMC/MCO 5239.2B.pdf new file mode 100644 index 000000000..283ab2163 Binary files /dev/null and b/docs/artifacts/categorization-references/USMC/MCO 5239.2B.pdf differ diff --git a/docs/artifacts/categorization-references/USMC/NAVMC 3500.124A Ch 1.pdf b/docs/artifacts/categorization-references/USMC/NAVMC 3500.124A Ch 1.pdf new file mode 100644 index 000000000..b76b32e46 Binary files /dev/null and b/docs/artifacts/categorization-references/USMC/NAVMC 3500.124A Ch 1.pdf differ diff --git a/docs/artifacts/categorization-references/USSF/15f71607-ab7b-43f1-9176-9ec63a4f124d.pdf b/docs/artifacts/categorization-references/USSF/15f71607-ab7b-43f1-9176-9ec63a4f124d.pdf new file mode 100644 index 000000000..bfed13302 Binary files /dev/null and b/docs/artifacts/categorization-references/USSF/15f71607-ab7b-43f1-9176-9ec63a4f124d.pdf differ diff --git a/docs/artifacts/categorization-references/USSF/ussf-5-c-cfetp-part-ii-5-cxxx-d-r-2-zZkTQdDxoLkvAJuZJwy.pdf b/docs/artifacts/categorization-references/USSF/ussf-5-c-cfetp-part-ii-5-cxxx-d-r-2-zZkTQdDxoLkvAJuZJwy.pdf new file mode 100644 index 000000000..8ee5b75c0 Binary files /dev/null and b/docs/artifacts/categorization-references/USSF/ussf-5-c-cfetp-part-ii-5-cxxx-d-r-2-zZkTQdDxoLkvAJuZJwy.pdf differ diff --git a/docs/artifacts/hw-sw-list/FedRAMP_High_HWSWList_Template.xlsx b/docs/artifacts/hw-sw-list/FedRAMP_High_HWSWList_Template.xlsx new file mode 100644 index 000000000..606820298 Binary files /dev/null and b/docs/artifacts/hw-sw-list/FedRAMP_High_HWSWList_Template.xlsx differ diff --git a/docs/artifacts/hw-sw-list/IL5_HWSWList_Template.xlsx b/docs/artifacts/hw-sw-list/IL5_HWSWList_Template.xlsx new file mode 100644 index 000000000..f2a04c6d0 Binary files /dev/null and b/docs/artifacts/hw-sw-list/IL5_HWSWList_Template.xlsx differ diff --git a/docs/artifacts/ppsms/FedRAMP_High_PPSMBoundariesInformationExport_Template.xlsx b/docs/artifacts/ppsms/FedRAMP_High_PPSMBoundariesInformationExport_Template.xlsx new file mode 100644 index 000000000..12ee1aa66 Binary files /dev/null and b/docs/artifacts/ppsms/FedRAMP_High_PPSMBoundariesInformationExport_Template.xlsx differ diff --git a/docs/artifacts/ppsms/IL5_PPSMBoundariesInformationExport_Template.xlsx b/docs/artifacts/ppsms/IL5_PPSMBoundariesInformationExport_Template.xlsx new file mode 100644 index 000000000..f087f3e7a Binary files /dev/null and b/docs/artifacts/ppsms/IL5_PPSMBoundariesInformationExport_Template.xlsx differ diff --git a/docs/path-to-authorization.md b/docs/path-to-authorization.md index 5ccdcfb32..7d4e39853 100644 --- a/docs/path-to-authorization.md +++ b/docs/path-to-authorization.md @@ -66,9 +66,9 @@ privacy risks - Authorization boundaries establish the scope of systems to be protected, managed, and authorized for operation or use. - [Impact Level 5 Authorization - Boundary](https://drive.google.com/drive/folders/1BLtoC59BMUueC9uwtWjBymJuQg2ku2m3) + Boundary](https://forms.gle/zdv7Gip4opmdhBqk7) - [FedRAMP High Authorization - Boundary](https://drive.google.com/drive/folders/16zsUdmzq_fK1BRFCrjgxsFRM23YVhjBa) + Boundary](https://forms.gle/zdv7Gip4opmdhBqk7) - Regularly assess the security and privacy risks at the organization level and system level. Update risk assessment results on an on-going basis. @@ -80,9 +80,9 @@ based on the impact analysis - [Categorize](https://csrc.nist.gov/pubs/sp/800/60/v1/r1/final) each system based on the impact to the organization if the confidentiality, availability, or integrity were to become compromised. - - [FIPS 199](https://drive.google.com/drive/u/0/folders/1CMLkSzmdJTtld5-R7Ttks2uSGvv79Ikr) + - [Categorization References](/docs/artifacts/categorization-references/) - [System Security Plan - Templates](https://drive.google.com/drive/u/0/folders/1qV0Pu9EDnCEJpk0iKDodU_69BN96hEVr) + Templates](https://forms.gle/zdv7Gip4opmdhBqk7) [**Step 2; Select**](https://csrc.nist.gov/Projects/risk-management/about-rmf/select-step): @@ -110,10 +110,10 @@ risk assessment(s) - How effective are the controls we have implemented? What is the frequency in which the controls are monitored? - [Security Control Traceability Matrix (SCTM) - Templates](https://drive.google.com/drive/u/0/folders/13SahM7cIrE_jeA2G103yhGfpeXlBaZIq) + Templates](https://forms.gle/zdv7Gip4opmdhBqk7) (IL5 H-H-X and FedRAMP High Baselines) - [Policies and Procedures - Templates](https://drive.google.com/drive/u/0/folders/1qnZ0N2BrRd8fF5u4h06H2Bbd4TxvLJvl) + Templates](https://forms.gle/zdv7Gip4opmdhBqk7) (IL5 HHX and FedRAMP High Baselines) [**Step 3; @@ -181,17 +181,17 @@ Continuously **monitor** control implementation and risks to the system **Additional Artifacts for an ATO:** - [Privacy Impact Assessment - (PIA)](https://drive.google.com/drive/u/0/folders/18N1nBCZOaV2peJI4cEDJ0KSNyTo3s32o) + (PIA)](/docs/artifacts/PIA-PCIL-SORN/) - [PII Confidentiality Impact Level - (PCIL)](https://drive.google.com/drive/u/0/folders/18N1nBCZOaV2peJI4cEDJ0KSNyTo3s32o) + (PCIL)](/docs/artifacts/PIA-PCIL-SORN/) - [System of Records Notice - (SORN)](https://drive.google.com/drive/u/0/folders/18N1nBCZOaV2peJI4cEDJ0KSNyTo3s32o) + (SORN)](/docs/artifacts/PIA-PCIL-SORN/) - [Hardware - List](https://drive.google.com/drive/u/0/folders/1fH-PDmfeJxf7b8BNkJVW39EHtUhYImUm) + List](/docs/artifacts/hw-sw-list/) - [Software - List](https://drive.google.com/drive/u/0/folders/1fH-PDmfeJxf7b8BNkJVW39EHtUhYImUm) + List](/docs/artifacts/hw-sw-list/) - [Ports, Protocols, and Services Management - (PPSM)](https://drive.google.com/drive/u/0/folders/1cvnyqHlwMINoxU2sZ61OQRWOKetSauuF) + (PPSM)](/docs/artifacts/ppsms/) **Things to Consider:** diff --git a/fast/stages-aw/0-bootstrap/README.md b/fast/stages-aw/0-bootstrap/README.md index 9edeed107..998d4e545 100644 --- a/fast/stages-aw/0-bootstrap/README.md +++ b/fast/stages-aw/0-bootstrap/README.md @@ -179,7 +179,7 @@ These features are optional and only enabled if the relevant variables have been ## How to Run This Stage -For detailed information on prerequisites and steps to deploy this stage, please see the latest [Detailed Deployment Guide (DDG)](https://drive.google.com/drive/u/0/folders/1OLgdf_VnY8zdkcmxHPwhEVoidGAqY6PX) If you do not have access, you will have to request it. +For detailed information on prerequisites and steps to deploy this stage, please see the latest [Detailed Deployment Guide (DDG)](/docs/ddg.md) If you do not have access, you will have to request it. ## Customizations diff --git a/fast/stages-aw/1-resman/README.md b/fast/stages-aw/1-resman/README.md index 60b387a27..0004ce023 100644 --- a/fast/stages-aw/1-resman/README.md +++ b/fast/stages-aw/1-resman/README.md @@ -23,7 +23,7 @@ The design of this stage ensures that all parts of a Stellar Engine deployment r ## How to Run This Stage -For detailed information on prerequisites and steps to deploy this stage, please see the latest [Detailed Deployment Guide (DDG)](https://drive.google.com/drive/u/0/folders/1OLgdf_VnY8zdkcmxHPwhEVoidGAqY6PX) If you do not have access, you will have to request it. +For detailed information on prerequisites and steps to deploy this stage, please see the latest [Detailed Deployment Guide (DDG)](/docs/ddg.md) If you do not have access, you will have to request it. ### Impersonating the Automation Service Account