Content area
The Department of Defense (DoD) stands at a critical point of failure in cybersecurity preparedness due to its reliance on legacy technologies and the manual processes associated with the Risk Management Framework (RMF). These outdated systems initiate operational stagnation which delay mission execution and elevate risks. This study will challenge the problem head on through devising a strategic approach for modernization with the automation of tools: OpenRMF, RMF Orchestra (RMF-O), and RMF Factory (RAFT) which overcome the obstacles positioned applying the RMF in real time. This research employed the Delphi method as a basis with ten senior practitioners from the cybersecurity field to evaluate the tools in the RMF’s seven steps for the evaluation during the iterative rounds. The results indicate automation expedited the authorization process, minimized the degree of perceived error, and improved the monitoring of risks. Experts uncovered established cultural resistance and structural barriers which hinder adoption with automation. The study delivers a resilient blueprint for federally directed cybersecurity strategies positioning the DoD to operate with greater agility, accuracy, and readiness for cyber operational assessments.
