Free Artifacts Templates

Admin — Tue, 23 Oct 2007 11:01:56 GMT

Attached are the templates that we use for our DIACAP Services division. We created the templates to fill the void created by the lack of guidance on how to "prove" compliance with the DoDI 8500.2 IA Controls. The Artifact outlines map back to the 8500.2 IA Controls and provide documented traceability to show that the IA Control is met.

We are sure that there will be questions about the how and why we did things, so please post comments/suggestions. The attached are sanitized samples from one of our previous engagements and while not the all encompassing end deliverable, they should provide a good starting point.

We are offering these up, at no charge, to try and help with what it really means to be DIACAP compliant. Our goal is to move the focus of IA into implementation and execution, not C&A automated tools or documentation circles. Like any template or automated tool, the information is only as good as the person writing it. The templates do not cure cancer, guarantee success or enable you to just paste in your system name--they give you a starting point.

Once we are finished posting our internal library, there should be no reason to spend money on automated solutions to produce C&A documentation, thus enabling you to spend your limited IA dollars more wisely by focusing on engineering secure and compliant solutions.

And of course, one caveat:

-Government Personnel, defined as Civil Service and Military personnel: Use, abuse and change the templates as much as you see fit. You are more than welcome to remove the "Template Developed by I-Assure, http://www.i-assure.com" text on the front page--but of course, it would be nice if you keep it :).

-Contractors, defined as anyone not in the above category, that plans on using our templates to support their contracts with the Government: Modify the templates as you see fit, but you are required to keep the "Template Developed by I-Assure, http://www.i-assure.com" text on the front page.

NOTE: The below IA Controls are not present in the attached Artifacts
DCAR-1
ECDC-1
ECML-1
ECND-1, ECND-2
PEDD-1

I-Assure Forums / Information Assurance / DIACAP Artifact Templates

Free Artifacts Templates