Research Summaries

Back Building Information Assurance (IA)/Risk Management Framework (RMF) into the Enterprise Engine (EE)

Fiscal Year 2017
Division Research & Sponsored Programs
Department Naval Research Program
Investigator(s) Boger, Dan C.
Sponsor NPS Naval Research Program (Navy)
Summary The Enterprise Engine (EE) offers an integration approach which appears faster, cheaper, and smarter while enabling semantic interoperability. It needs to improve its abilities to accommodate the DOD risk management framework (RMF) and information assurance (IA) directives.
The RMF is an emerging standard practice in industry and DOD which establishes risks to programs, their source, probability of occurrence, and severity. IA is a long standing set of development requirements often addressed poorly within a system's development cycle.
The Model Oriented Development Environment (MODE) is a model driven development environment designed and proven to easily, rapidly, and affordably integrate disparate systems, both new and legacy. MODE proved successful in supporting a very complex NGA nautical chart updating process and was also used with the Marine Corps Warfighting Lab's UTACC project.
EE has not built in risk management capabilities or addressed IA requirements, though a design has been completed. Because of EE's model driven design approach and flexible development environment, it is hypothesized that EE could address RMF and IA in a very innovative fashion, reducing time and costs while improving the quality of risk mitigations. Further, it is presumed that EE could do so continuously thus better adjusting and adapting to emerging threats.
Keywords
Publications Publications, theses (not shown) and data repositories will be added to the portal record when information is available in FAIRS and brought back to the portal
Data Publications, theses (not shown) and data repositories will be added to the portal record when information is available in FAIRS and brought back to the portal