Continuous authorization and monitoring tasks in the CAM Workspace

The CAM Workspace is a centralized hub where you can continuously monitor and manage compliance with the NIST Risk Management Framework to ensure adherence to your security policies and guidelines.

Monitoring and managing security from the CAM Workspace Home page
The CAM Workspace is a centralized hub where you can continuously monitor and manage compliance of users and systems with the NIST Risk Management Framework to ensure adherence to your security policies and guidelines.
Monitor and manage your NIST security posture
Access the CAM Overview, AO Overview, and SCA Overview dashboards from the CAM Workspace to monitor and analyze data and view CAM reports.
Monitor and manage CAM tasks
Use the Tasks page to address the approvals, control attestations, and all other items that are assigned to you and to your group.
Managing POA&Ms issues
In CAM application, all issues related to an authorization package are called as Plan of Actions and Milestones (POA&Ms). The issues can be package issues, or control issues, engagement issues, or control test issues that are related to the package.
View reports on authorization boundary elements
Use the authorization boundary overview page to define the parameters of a security measure for an organization.
View package details in CAM Workspace
Use the authorization package overview page to view documents and evidence that help you to assess your organization's security posture.
ATO artifacts for an authorization package
Generate Authority to Operate (ATO) artifacts such as System Security Plan (SSP), Security Assessment Report (SAR), Plan of Actions and Milestones (POA&Ms), Security Assessment Plan (SAP), Authority to Operate (ATO Letter), and Executive Summary from an authorization package in Microsoft Word format. Generating ATO artifacts as Microsoft Word format enhances ease of editing, collaboration, and compliance, confirming professional and portable documents.
CAM OSCAL
Open Security Controls Assessment Language (OSCAL) provides a standardized way to express control-related information, enabling interoperability, consistency, and automation in IT security. It supports the JSON format only. CAM supports OSCAL version 1.1.2.
Document reuse across records
Link documents to authorization packages, boundaries, and engagements from your workspace, cloud storage, or local systems. Linked documents become shared resources across records.
Generate an authorization package summary
Generate an AI-powered summary of an authorization package to view its status, key metrics, and operational information in a single consolidated view.

Parent Topic:Governance, Risk, and Compliance