View authorization boundary details

Use the authorization boundary overview page to define the parameters of a security measure for an organization.

Before you begin

Role required:

• sn_irm_cont_auth.authorization_official
• sn_irm_cont_auth.information_owner
• sn_irm_cont_auth.info_system_sec_manager
• sn_irm_cont_auth.info_system_sec_officer
• sn_irm_cont_auth.sec_control_assessor
• sn_irm_cont_auth.system_owner
• sn_irm_cont_auth.scheduler
• sn_irm_cont_auth.system_user
• sn_irm_cont_auth.admin
• sn_irm_cont_auth.executive_read

About this task

For example, your organization might have many datacenters. You can define a parameter within a boundary, for example Application servers in San Diego data center. Setting this boundary and parameter enables you to monitor the objects within the boundary and set the scope.

Procedure

1. Navigate to All > CAM Workspace and then select the lists icon ().
2. From the Authorization boundaries in the RMF list, select an authorization boundary record.
   The boundary overview page displays all the authorization packages that are available within the boundary. However, when you select the sidebar, it displays an active package.

   

3. Select the sidebar icon ().
   The Highlighted details section displays:

   • The name of the active package, its state, and impact. If there’s an active package existing for the boundary, you can’t create another package for the boundary.
   • The link to the package, if selected, helps you to navigate to the associated, active authorization package.
   • The users who are directly responsible and have a key role to play in updating the authorization boundary.
4. To create another package, select the Authorization Packages related list and deactivate the existing package by selecting false in the Active column of the package.
   This action deactivates the current package, and you can then create a package by selecting New. A boundary having only one active package behavior is guided by NIST 800-53 revision 5.
5. To view the relationship between the selected authorization boundary and all its associated objects in a distinct visualization, select 360° view.
   360° view is added in the Overview pages of Authorization Boundary, Authorization Package, Control, Control objective, Control overlays, Control test, Test template, Test plan, Engagements, and in the Details pages of Indicator, Indicator Template, and POA&Ms.

   

What to do next

Select the name of the Active package in the side bar to navigate to the Authorization Package overview page.

• Configure boundary hierarchy
  Establish parent-child relationships between authorization boundaries to improve boundary management, visibility, and organizational structure within Continuous Authorization and Monitoring. You can assign a parent boundary and associate multiple child boundaries to authorization boundary.
• Create a boundary filter
  Create boundary filters to define system elements within an authorization boundary based on specific table conditions.