Mandated by FISMA and OMB A-130, Certification and Accreditation (C&A) is the formal process of assessing the technical, operational and management controls for a given system, determining the residual risk, and authorizing the system to operate.

In this session learn how to shift from point in time assessments to continuous assessment by:

• Leveraging C&A automation to provide continuous data collection and artifact preparation.
• Tailoring C&A workflow for effective integration into organizational processes.
• Maximizing existing investments in security controls (people, processes and technology).
• Enhancing risk management capabilities through the fusion of real-time security operations data feeds.