Module Configuration - Risk Management Framework

PROPRIETARY

REVN/PUBL DT 10/09/2024  v4.202408


TABLE OF CONTENTS

Overview

Users must be a System Admin (SA) to be able to access the System Administration landing page to make needed configuration changes to the module.


The following do not apply for the Risk Management Framework module:

  • Reminders 
  • Rules for Ignoring Special Access and Caveats for Assignments
  • Sequences
  • System Parameters


Cross Module Assignment Rules - Risk Management Framework Module


System Administrator Mode landing page > System Profile submenu > SYSTEM PROFILES screen > Global tab > Rules for Cross Module Assignments profile


Ignore RMF System Accesses

Ignore RMF System Classification

Ignore RMF User Accesses

Ignore RMF User Classification


Drop-Down List Boxes by Tabs and the corresponding Profiles - Risk Management Framework Module


Unless otherwise stated, the profiles for this module are located:

System Administrator Mode landing page > System Setup menu > System Profile submenu > SYSTEM PROFILE screen > Asset Management tab > Risk Management Framework tab


Assignments Tab


Default Drop-Down Field NameCorresponding System Profile
RMF - USERS screen
RoleUser Roles



Associated Documents Tab


Default Drop-Down Field NameCorresponding System Profile
TypeAssociated Document Type - Risk Management Framework


Cert Test Tab

There are no modifiable drop-downs on this tab.


Environment/Description Tab

Default Drop-Down Field Name
Corresponding System Profile
Is the Facility a Closed or Restricted Area?Area Type
Classification LevelRMF Classification Level
CaveatsAccess Type (Global profiles tab)
Is the Facility approved for Open or Closed Storage?Storage Type
List all Classified and Lower Classified SystemsClassified Systems


Impact/SSP Tab

Default Drop-Down Field NameCorresponding System Profile
RMF - IMPACT screen
Impact TypeImpact Type
Information TypeInformation Impacted
Confidentiality ImpactImpact Level
Integrity ImpactImpact Level
Availability Impact
Impact Level
RMF - SSP screen
Revision TypeSSP Revision Type


System Identification Tab


Default Drop-Down Field NameCorresponding System Profile
System TypeSystem Type
System Plan TypeSystem Plan Type
System StatusSystem Status
Purpose of SystemPurpose of System
CUI TypeCUI Type (Global profiles tab)
Type of PlanPlan Type
System Mobility DescriptionSystem Mobility Description
Assured File Transfer Type

Assured File Transfer Type

DCSA Overlay Control Selection

DCSA Overlay 

Minimum ClearanceRMF Classification Level
ClassificationRMF Classification Level
Caveats/Formal Access ApprovalsAccess Type (Global profiles tab)


Field Modification - Risk Management Framework Module


System Administrator Mode landing page > System Setup menu > Field Labels submenu > SETUP SCREEN > Risk Management Framework icon > SETUP SCREEN DETAIL screen > SYSTEM IDENTIFICATION section


The Field Labels module allows you to:

  • Hide a field
  • Hide a field except for users with Update permission
  • Configure User Defined Fields (UDFs)
  • Designate a field as required
  • Rename a field
  • Change field formatting – Capitalize the entire field name, or capitalize the first character of each word


Permissions - Risk Management Framework Module


System Administrator Mode landing page > User Setup menu > User Profile submenu > USER PROFILE MANAGEMENT screen > Permissions tab > Facility Level Permissions tab > RISK MANAGEMENT FRAMEWORK section


Profiles - Risk Management Framework Module


System Administrator Mode landing page > System Setup menu > System Profile submenu > SYSTEM PROFILES screen:

> Asset Management tab > Risk Management Framework tab

> Global tab


System Administrator Mode landing page > System Setup menu > System Profiles submenu > Asset Management  tab > Risk Management Framework tab  
  • Area Type
  • Associated Document Type - Risk Management Framework
  • Assured File Transfer Type
  • Classified Systems
  • DCSA Overlay
  • Impact Level
  • Impact Type
  • Information Impacted
  • Plan Type
  • Purpose of System
  • RMF Classification Level
  • SSP Revision Type
  • Storage Type
  • System Mobility Description
  • System Plan Type
  • System Status
  • System Type
  • User Defined Drop Down - 1
  • User Defined Drop Down - 2
  • User Defined Drop Down - 3
  • User Defined Drop Down - 4
  • User Defined Drop Down - 5
  • User Defined Drop Down - 6
  • User Defined Drop Down - 7
  • User Defined Drop Down - 8
  • User Defined Drop Down - 9
  • User Defined Drop Down - 10
  • User Roles

System Administrator Mode landing page > System Setup menu > System Profiles submenu > Global tab

  • Access Type
  • CUI Type
  • Cross Module Assignment Rules (see the corresponding section below)



Rules when Personnel record being set to Inactive


System Administrator Mode landing page > System Setup menu > System Profile submenu > Personnel Security tab > Personnel Management tab:

> Personnel System Parameters > Feature Configuration - Rules when Personnel record being set to Inactive system parameter > Value Y

> Rules when Personnel record being set to Inactive profile 


NOTE:  The Rules when Personnel record being set to Inactive profile displays only when the Feature Configuration - Rules when Personnel record being set to Inactive system parameter Value is set to Y. 


These rules allow for configuration of system behavior when an employee record is set to Inactive status in the Personnel Management module. The below rule in the profile applies to the Risk Management Framework module.

  • Unassign as User from RMF


User Defined Fields (UDFs) - Risk Management Framework Module


System Administrator Mode landing page > System Setup menu > Field Labels submenu > SETUP SCREEN > Risk Management Framework icon > SETUP SCREEN DETAIL screen > SYSTEM IDENTIFICATION section > User Defined Fields section


UDFs AvailableSETUP SCREEN location

10 Text Entry fields 

10 Date fields

10 Drop Down fields

SYSTEM IDENTIFICATION section > User Defined Fields section