Adding System Packages

You must be an Administrator or SystemPackage Administrator to add a new system package. When you add a new System Package in OpenRMF^® Professional the Add menu option is under System Packages and there is an New button on the system package listing page. This takes you to the add page and lists several fields to fill in.

You must enter a system package title, a unique system package key, and the description of the system package. Then click the Next button. You must choose an available framework type. And based on the framework type you choose you may have one or more levels to choose for your compliance framework as well. Then click Next. Fill in the Description screen where you have the information and click Next. Then fill in the POC and Authorization screens as well. When done click the Create System Package button.

New System Package Wizard

Using the New System Package Wizard, you can specify the title, system key acronym, version and description on the first tab. You also can specify to add your current user to the “SystemOwner” permission in the new system package so it immediately shows on your dashboard listing for system packages. Then click the Next button. You must choose an available framework type. And based on the framework type you choose you may have one or more levels to choose for your compliance framework as well. Then click Next. Fill in the Description screen where you have the information and click Next. Then fill in the POC and Authoriation screens as well. When done click the Create System Package button.

Adding a New System Package via the Wizard

When done click the Create System Package button and your new package is created. You are presented with quick links to go to your dashboard, add overlays or tailor your security controls, or start to upload data quickly.

Completed System Package Wizard

Add a System Package Form-Based

If you want to fill in the larger form all at once or upload a system export XML file, click the Use Single Page Form on the New Package Wizard. This is the alternative way to add a new system package.

You have the same fields to enter they are just all on one form to view at once. Optionally, you can start with a System Export XML file from your eMASS ATO package if available. Download a Sample XML to see what your eMASS System Export XML file should look like.

Adding a New System Package

Near the bottom of the add page is an area to add the Authorization Type (ATC, ATO, IATT, Type Accreditation) as well as the current status, date, and comments for the authorization (if any). When all data is filled out that you have for the new system package, click the Save Changes button.

Adding a New System Package

Using an eMASS System Export File

If you wish to use your XML file exported from eMASS, click the Upload button on the larger form and add/drop your file into the popup window. Then click Upload. When you upload the file, it will return and request you to validate the information. It also will tell you if it found any overlays to add. There are several form fields that pre-populate.

Title
System Key
Acronym
Version Number
Description
Framework Type and Levels
Organization
IT Registration (if used)
System Type
List of all controls specified for your ATO
List of all overlays and their controls for your ATO

Adding a New System Package via eMASS System Export

Verify the information before setting status and saving the data for your new system package. When saved there are several things setup for your new system package automatically.

All form fields filled in
The list of controls you must meet, in addition to your framework settings
All overlays and the controls for those overlays

Adding a New System Package via eMASS System Export with Controls and Overlays

You still specify the authorization information near the bottom of the screen as you would if you typed all information into the form. Then click the Save button to validate your information and create your new system package.

When saved, your control list will be added as a Tailored list of controls. And any overlays and their controls will be added to your system package as well for overlays to include in compliance statements and compliance generation.

System Package Keys

The system key is unique across all system packages for this installation no matter if the system package is active or marked read-only. And it cannot be used more than once. It must be only letters (a to z lowercase), numbers (0 to 9) or the - dash as a special character. You cannot use other special characters or the space character. All system package keys are forced to be lowercase as well and must be unique per installation.

A Mention on Licensing

When you request a license for OpenRMF^® Professional you are given a license file and a key file. When matched together and uploaded into the application, this opens up the ability to create, add, edit, and delete checklists and system packages. There is a maximum system packages number included in this license that tells you the maximum number of active system packages you can have at one time.

This is related to the Read-Only mechanism of making a system package read-only and inactive. To add a new system package when you are at your maximum, you either have to request an updated license for the correct number of system packages. Or you have to mark a system package as read-only, meaning its information cannot be updated.