Rapid ATO Achievement and
Enhanced Cyber Defense With Ingalls

Challenges Faced

In 2023, 2AF/A6, Air Education and Training Command (AETC), found themselves looking for innovative technology to meet the MAJCOMs Operational Command Tasks to incorporate digital-age technology across the command – Technical Training Transformation for the Digital Age. The desired outcome is to redesign AETC IT to support Force Development and Talent Management, support learning, advance learning applications, and data analytics so Airmen can obtain and exchange information on their device of choice.

Areas in which Ingalls achieves this Line of Effort (LOE) is to help 2AF/A6 to evaluate technologies and capabilities to reduce duplicities, enhance standardization for Phase 0 aka Prepare Step, and Enable consistency for stakeholders.

The 2nd Air Force encountered several significant challenges in its cybersecurity efforts:

• Complex Compliance Requirements: Navigating the Risk Management Framework (RMF) and Authorization to Operate (ATO) processes was cumbersome, leading to delays in achieving compliance.
• Resource Limitations: The existing cybersecurity team lacked sufficient personnel and expertise to effectively manage the increasing demands for security assessments and documentation.
• Evolving Threat Landscape: As cyber threats became more sophisticated, the 2nd Air Force needed a proactive approach to risk management that could adapt to new vulnerabilities

Solutions Provided by Ingalls

Innovative Technology Coupled With Human-in-the-Loop Experts:

CSAR^®/RMF Pro Implementation

Ingalls introduced its Cybersecurity Assurance Readiness (CSAR®) tool, which employs an automation-driven modular approach while maintaining a human-in-the-loop model. This helped streamline the ATO process by providing an intuitive dashboard and expert guidance throughout the compliance journey.

The entire experience offered refined processes to reduce chance of errors, confusion, and fatigue and provided the following benefits:

• Intuitive dashboard
• Mapping of mandatory forms
• Human-in-the-loop (Dedicated SME)
• Cyber plans & playbooks

Conclusion: Benefits of an Ongoing Strategic Partnership

• Enhanced cybersecurity readiness: The collaboration has strengthened 2AF's ability to identify and categorize IT systems entering the RMF process.
• Automated compliance: Ingalls' solution automates mandatory Air Force ATO forms, enabling users to keep pace with RMF requirements more efficiently during the RMF Prepare Step.
• Scalable and responsive services: The partnership has demonstrated the effectiveness of repeatable and sustainable Assessment & Authorization (A&A) services.

This contract highlights Ingalls Information Security's commitment to providing innovative and customized solutions that meet the dynamic challenges faced by the Department of Defense. By collaborating with the 2AF/A6 Directorate, Ingalls seeks to establish a new benchmark for cybersecurity excellence within the military and defense sectors.