Streamlining compliance validation through automation processes

Abstract

This thesis analyzes some of the processes, tools, and content used in the certification and accreditation of Department of Defense information technology systems. The result of this analysis identifies the areas that would be improved by streamlining compliance validation through continuous monitoring and automating processes. The output of this research will be used to determine a set of requirements that, if met, would allow for the creation of a system that could be used to reduce the cost associated with compliance testing of network devices and servers, while increasing the accuracy and frequency of compliance validation. A result of this thesis will be a proof-of-concept tool that will be evaluated for functionality and used as a starting point for further discussion on future development.