Common Controls' Framework Resource

Some details on scope:

• Common Control Framework (“CCF”) Control Management:
• Provide research assistance to answer Security Controls Orchestration (“SCO”) customer questions by referencing CCF controls content and evidence information in RSA Archer (“Archer”)
• Conduct data entry for new CCF controls and edits to existing CCF controls in Archer based on control requests submitted to the SCO team. The scope includes control activity statements and control implementation statements for client enterprise-level controls and service team specific controls.
• Support development of service team specific controls for subject matter expert (SME) validation by analyzing technical configuration data
• Conduct quality review of CCF content in Archer for readability and consistency between control activities and control implementations for 15 control domains and escalate to the client Program Manager for discrepancies
• Provide analysis and feedback on mapping between evidence artifacts and CCF controls in Archer and escalate to the client Program Manager for potential discrepancies
• Provide Project Management support of control validation activities:
• Maintain validation schedule
• Prepare validation packages for review by client Program Manager and submission to control SMEs
• Attend validation discussions where permitted and collate data discussed