Using System Package Compliance Overlays

When generating compliance you also may need to use overlays. These are groups of controls that are added onto your listing based on RMF, FedRAMP, StateRAMP^TM or tailored controls. In OpenRMF^® Professional you have two types of overlays - System Package overlays and then application-wide available overlays that Adminisrators can add for any system package to use.

By default, OpenRMF^® Professional comes with 6 overlays:

Privacy/PII
National Security System (CNSSI)
Classified Systems
Federal PKI
Electronic Physical Access Control Systems (ePACS)
JSIG Special Access Programs

System Package Compliance Overlays

Adding an Available Overlay

To add an available overlay click the Add an Overlay button if you are a System Owner of the system package you are viewing. A table appears showing a listing of available overlays already made and shared for people using this installation of OpenRMF^® Professional. Find the one you wish to use and click the Add button.

The overlay is now copied into your system package. Now that it is in your system package you can edit it and make it inactive if not in use.

System Package Add a Compliance Overlay

Creating an Overlay

To create your own overlay from scratch click the Create Overlay button. This will create an overlay for you to use in your system package. Add a title, description and 1 or more controls to save your overlay. When active it will automatically be included in compliance generation as well as SSP control to vulnerability information.

System Package Create a Compliance Overlay

Edit an Overlay

To edit an overlay click the … menu button to the right of the listing. This loads the Edit window with the current settings for the overlay. Update the title, description and 1 or more controls to save your overlay. Remmeber, when active it will automatically be included in compliance generation as well as SSP control to vulnerability information. Click the Save button to save the updates.

Saving and Loading an Overlay

You can save overlays to JSON files or load correct JSON files as new overlays with the Add/Edit section of the Overlay page. When in Add or Edit mode, you can click the “Overlay Controls File” button to select an overlay file to load it and then click the “Load from File” button. To save an overlay out to a file you can click the “Save to File” button as well.

System Package Edit an Compliance Overlay