Pinnacle Solutions’ KC-10 Training System received a one-year Authority to Operate (ATO) accreditation under the U.S. Department of Defense's (DoD) Risk Management Framework (RMF). The accreditation process of a DoD Information Technology System (IT) ensures the system operates with an acceptable amount of risk as determined by the Authorizing Official (AO). The evaluation by the AO ensures Pinnacle's KC-10 simulator network architecture meets information assurance and cyber-security requirements as determined by the RMF program. The one-year accreditation lets Pinnacle monitor and assess impacts of upcoming device modifications on the network while ensuring Pinnacle's KC-10 training devices are able to participate in Mobility Air Force Distributed Network training exercises for an extensive period of time.
Pinnacle provided cyber-security support including:
- Host Computer Replacement (Rehost) modification and migration to Windows 10 Secure Host Baseline (SHB) on all four Weapon System Trainers (WSTs) and Flight Training Devices (FTDs).
- Plan of Actions and Milestones (POAM) for two Boom Operator Trainers (BOTs).
- Enterprise Mission Assurance Support Service (eMASS) for 114 Priority 2 controls.
- Assured Compliance Assessment Solution (ACAS) vulnerability and compliance scans every 30 days.