Anand Janjal

OpenGRCRMF: A Vendor-Neutral Framework for Teaching and Modeling RMF Automation, Continuous Authorization, and Zero Trust Governance

Abstract—Federal and regulated organizations continue to rely on document-centric Authorization to Operate (ATO) processes even as the NIST Risk Management Framework (RMF), continuous monitoring guidance, Zero Trust Architecture (ZTA), and continuous authorization initiatives require more continuous, evidence-driven ri...