CSAT: A User-friendly Efficient NIST-spec Information System Development Guideline Tool

NIST developed risk management framework and guidelines that assist agencies to implement integrated, organization‐wide programs to manage information security risk, and further developed Cloud Security Architecture Tool (CSAT) to facilitate in this matter. However, NIST’s CSAT needs further improvement and implementation of new functions such that it can be commercialized as an Enterprise‐grade product. In this project, InfoBeyond advocates the development of a user‐friendly, efficient, reliable, and generic CSAT. Our CSAT will be delivered: (i) an Enterprise CSAT standalone version, and (ii) a CSAT Cloud version. Specifically, our CSAT is built over a Java Spring and Angular Web –based architecture to support state‐of‐the‐art operational flexibility through user‐friendly GUI. It overcomes the NIST’s CSAT limitations such as an outdated Windows‐based software architecture. In such an architecture, our CSAT efforts are two‐fold: (i) Enhancement of the existing NIST's CSAT functions, (ii) Implementation of new functions. More specifically, our CSAT enhances the NIST’s CSAT functions, such as report composition and generation, heatmap, and user interfaces. Meanwhile, our CSAT implements new features, e.g., collaborative user mode for generating the guideline report. All these improvements and the new features facilitate government agencies’ adoption of secure cloud solution effectively.