Model: A5: Phase 5: Assess Vulnerabilities and Penetration
Creator
Description
Parent Activity: Phase 5: Assess Vulnerabilities and Penetration
Activities
Plan CVPA
Coordinate with OTA
Execute CVPA & Document Results
Concepts
Cooperative Vulnerability and Penetration Assessment (CVPA) reporting
updates to RMF and POA&M
Authorization to Operate (ATO)
CVPA operational assessment
cyber DT test reports
DT assessment
DT&E assessment
Operational Test Readiness Review (OTRR)
CONOPS
RMF and POA&M
operational test (OT) plans
MBCRA updates
Mission-Based Cyber Risk Assessment (MBCRA)
TEMP updates
OT data requirements
Operational Test Agency
Cybersecurity OTA Technical Experts
POA&M for remediation of vulnerabilities