C&A DocWriter® -- Software Suite for Managing C&A and IT Security
C&A DocWriter is a client-server application database for the management of IT security controls and documents for Government Certification & Accreditation, and Private Sector IT Governance, Privacy, and Security Auditing. Users interact through either a Windows client application, or using a web browser to access the web module which you host on your Microsoft Windows servers.
C&A DocWriter addresses these areas of IT security and the Certification & Accredidation Process:
- Collaborative Plan Development for System Security Plans and other documents.
- Tracking Information Assurance controls and test procedures
- Managing documents of any type
- Tracking issues that need to be resolved to comply with security requirements
- Managing recurring tasks
- Product C&A artifacts such as Plans of Actions & Milestones (POA&M), System identification Profiles, and enterprise level reporting.
Use C&A DocWriter for the following C&A and IT security applications:
Federal Government IT Governance
DITSCAP 8510.1-M
DIACAP
NIACAP/NIST 800-18 General Support System (GSS)
NIACAP/NIST 800-18 Major Application (MA)
NIST 800-53 and 800-53A Controls including Guidance and Enhancements
JAFAN
NISPOM
C4ISP and ISP
DCID 6/3
FIPS 201 Personal Identity Verification
Army Regulation 25-2 August 3, 2007
NERC CIP Controls
Use C&A DocWriter to:
Create SSAA's and other security plans
Manage Requirements Traceability Matrices (RTMs)
Manage Plans of Actions and Milestones (POA&Ms)
Manage and Document Security Test and Evaluation documents (ST&E).
Manage and implement security controls.
New: Version 5.0 Now Available!
Version 5.0 Features a New, More Efficient, Database Design Supporting:
Multiple Projects in a Single Database -- Manage all of your C&A data in a single
database.
Multiple Systems per Project
Multiple Instances of an IA Control per System -- Track IA controls at any level
of granularity.
Multiple Document Plan Templates per System -- Author and Track Multiple SSPs, SSAAs,
COOPs, and other documents.
Share IA Controls Among Systems -- Improves management of system boundaries and
provides more efficient documentation.
Predefine Groups of IA Controls -- Build custom groups of controls for improved
efficiency and reuse.
Version 5.0 Includes New Utility Programs
New
Control Pack Builder utility to build your own packages of custom IA controls.
C&A DocWriter now supports importing IA controls from Microsoft Excel.
New
Plan Builder utility to allows you to build and share document plan templates
for SSPs, COOPs, and other plans.
New
Administration Console consolidates all of your administrative tasks in a separate
client.
Version 5.0 New Knowledge Base Minimizes Repetitive Data Entry
C&A DocWriter uses an new IA Control Knowledge Base to minimize repetitive data
entry of IA control results. As users enter data for IA controls, they can
quickly browse previous entries for the same or similar controls and with a single
button click, duplicate those results. This minimizes the tedium of documenting
control results and enables consistent responses and documentation across systems.
Other Great Features Include:
Generate C&A Artifacts in Word or Excel
Requirements Traceability Matrix
Plan of Actions and Milestones (POA&M)
DIACAP Scorecard
Issue Tracking -- Track issues and actions that need to be addressed to complete
your C&A documents and assure compliance with action items. It's like
bug-tracking for the C&A process.
Advanced Search -- Powerful search capability helps you find documents and
information.
Author Security Plans in a Secure, Collaborative Environment
Unique to C&A DocWriter is the powerful hierarchical plan template.
This approach
allows all users who participate in the C&A process to share information.
The hierarchical plan brings together different users whether they are managers,
security officers or testers under one umbrella that produces greater efficiencies
and therefore lowers costs for building and managing security plans. Immediate operational
and cost containment benefits include:
- Dramatically shorter time to build a security plan and therefore certify the system
- Skilled testers can spend less time on plan development and more on high-value
testing tasks
- Managing the plan electronically significantly reduces costs associated with handling,
plan updates and storing paper documents
- Plans are stored in an enterprise database for powerful search capabilities allowing
organizations to easily update plans as new security threats emerge or new assets
are added.
C&A DocWriter Security
C&A DocWriter allows you to develop security plans and management document under
the highest practical security conditions. C&A DocWriter is suitable for
the Department of Defense highest levels of security. Security features include:
- Customizable password rules enforce minimum length and special character
requirements for password.
- Roles-based document access restricts documents to particular users.
- Document version control ensures that only one user at a time can modify
a document.
- Documents are never overwritten with changes. The entire change history
of documents can be access (with the proper permission of course!)
- User-based permissions control who gets to see or modify what.
- Every login attempt is logged.
- Every access to a document is logged.
System Specifications:
- Desktop application supports Windows 2000, XP (including SP2) and Later
- C&A DocWriter includes highly customizable security/permissions levels
- Open database can be integrated with other enterprise systems
C&A DocWriter Database
C&A DocWriter supports the following
databases:
- Microsoft Access (2000 and Later)
- Microsoft SQL Server (2000 and Later)
- Oracle (9i and Later)