The tutorial walks through setting up users and roles, permissions, naming conventions, general mitigations and overlays, as well as other items to consider before turning your users over to logging in and using OpenRMF Professional.

This video walks through creating system packages, roles, users, permissions, inheritance, loading data, generating compliance and starting your POAM for the initial setup of your system package.

This video walks through the scenario of how to use inheritance from a common control set in one system package in another system package. It also shows notifications when the underlying package updates its compliance you are inheriting as well. And it shows permissions you need to inherit from o...

This video walks through several checks using a web browser to ensure OpenRMF Professional is running correctly. And a few ways on the backend to make sure the server and the application are running happy and healthy.

This video shows how to use OpenRMF Professional and the Keycloak backend to create users, assign roles and group permissions, and manage users from the command line via Python.

This video shows how to setup a system package, a new API user, the API integration and then using that information to automate OpenRMF Professional via API calls. You can see how to use the scans and upload them, generate compliance, the automation repo example calls, and the impact in the GUI b...

This video walks through finding, downloading, and adding the CMMC framework files to OpenRMF Professional v2.13. It walks you through the process, how to use them, and how to set your new system package to the CMMC 2.0 framework as well as how the data works in generating compliance.

This video walks you through the steps to download curated CSF files and load them in the correct order to use the Cybersecurity Framework 2.0 in OpenRMF Professional v2.13.

In this video we walk you through how to compare your current framework, revision and level to an updated or newer framework, revision and level in OpenRMF Professional. See how the list of controls and CCIs may differ between them to understand the work involved. We use RMF revision 4 to revisio...

This video explains how to make a framework inactive or how to remove a framework (if not a default included one) in OpenRMF Professional. And how that affects current system packages, new packages, as well as reports and other areas.

Use some of the reports in OpenRMF Professional to go through a list of controls and control correlation identifiers (CCI) to learn the steps to complying with a cyber framework. Break down the components, subcomponents and more through interactive reports.

You can perform cyber hygiene across data, devices, and system packages. Compare compliance data across like workstations. Compare patch data across them as well. See what software is installed and what version across your accreditation package. And proactively monitor the differences to investig...

This video explains the command cyber readiness inspection (CCRI) calculations on checklist vulnerabilities, patch vulnerabilities, and other technology vulnerabilities. It also goes over the settings on what is used for weights and the calculations in a system package or top-level site wide sett...

This video walks you through creating a framework, framework levels, building your list of controls/CCI combinations for the levels, and how to upload them to start using your framework within OpenRMF Professional. It also shows you the similarities across system packages regardless of framework....