Risk Management Framework Process


To provide enterprise wide Risk Management Framework (RMF) support to the USMC Security Controls Assessor (SCA) and Authorizing Official (AO) for USMC Information Systems, enclaves, networks and applications.


About Us  
RMF functions include but are not limited to:  
  • Review accreditation documentation for information systems, enclaves and networks.

  • Analyze risks and provide recommendation to SCA.

  • Provide recommendations and letters for AO decision.

Risk Management Framework (RMF)  

Please note, the Marine Corps transition to RMF is currently in the Implementation Phase.


Marine Corps Compliance and Authorization Support Tool (MCCAST)
The MCCAST is the tool of choice used by the Marine Corps in support of the Assessment and Authorization process.



Last Update: 13 May 2020

Headquarters Marine Corps