{"id":"FR2213764335","name":"RunCyberAssurance","provider":"Noblis","providerSlug":"noblis","status":"FedRAMP Authorized","impact":"Moderate","authType":"Agency","authDate":"2023-08-31","serviceModel":["PaaS","SaaS"],"deployment":"Public Cloud","businessFunctions":["Analytics","Cybersecurity & Risk Management","Data Management","Operations Management","System Administration"],"assessor":"Lunarline, Inc.","assessorId":"137004","smallBusiness":false,"website":"www.noblis.org","description":"Noblis’ RunCyberAssurance® is a comprehensive, automated solution that advances the efficacy of Continuous Monitoring programs. The Noblis RunCyberAssurance solution enables agencies and their Cloud Service Providers to gain a fast, accurate view into their vulnerabilities, manage Plan of Action and Milestones (POA&Ms) and deviation requests and improve visibility into the security posture of complex information systems. RunCyberAssurance frees cybersecurity professionals from mundane manual tasks, allowing them to focus on high-value threat assessment activities. The solution accepts data feeds “as is” from over 40 industry standard vulnerability scanning tools and generates reports and outputs in FedRAMP and Open Security Controls Assessment Language (OSCAL) formats.   \n\nNoblis’ RunCyberAssurance is powered by our EDGE@AWS Platform-as-a-Service (PaaS) and leverages the Community AWS GovGloud Infrastructure-as-a-Service. In addition, it leverages AWS US East/West, Okta ID-as-a-Service and ServiceNow. The Noblis EDGE@AWS PaaS provides a FedRAMP Moderate compliant platform for Noblis applications and systems.","logo":"https://www.fedramp.gov/assets/img/logos/CSP_logos/RunCA%20Logo.png","inMarketplace":true,"agencies":["22-007"],"reuseCount":0,"leverages":["AGENCYAMAZONEW","F1603047866","F1512167750"],"leveragedBy":[],"timeline":[{"date":"2022-09-28","to":"FedRAMP In Process","certType":"Rev5"},{"date":"2022-10-05","to":"Agency Authorization In Process","certType":"Rev5"},{"date":"2023-08-31","to":"FedRAMP Certified","certType":"Rev5"}],"cr26":{"type":"Rev5","ocrOverdue":false,"valid":true,"findings":[{"level":"warning","message":"no UEI number; include it if you have one","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no business category listed","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no trust center link; CR26 requires one with access instructions","rule":"CDS-CSO-UTC"},{"level":"warning","message":"no link to secure configuration guidance","rule":"SCG-CSO-RSC"},{"level":"warning","message":"no next Ongoing Certification Report date","rule":"CDS-CSO-PUB"},{"level":"warning","message":"no service list; CR26 requires the services in scope","rule":"CDS-CSO-SVC"},{"level":"warning","message":"no documentation overview (repositories) listed","rule":"CDS-CSO-PUB"}],"assessor":"Lunarline, Inc."},"sponsor":"22-007","trustCenterCheck":null}