HomeMission AreasCritical Technology ProtectionIndustrial Security Field Operations (IO)NISP Authorization Office (NAO)RMF

Industrial Security

Risk Management Framework

NISP-eMASS Information and Resource Center

(08/14/2019) The NISP Authorization Office (NAO) released the NISP  Enterprise Mission Assurance Support Service (eMASS) Industry Operation Guide Version 1.0. The operation guide is designed to assist Industry users navigate eMASS. The operation guide is posted on the NISP eMASS Information and Resource Center(https://www.dss.mil/ma/ctp/io/nao/rmf/) under "Resources".  If you have questions or concerns, please contact the NAO eMASS Mailbox at dcsa.quantico.dcsa.mbx.emass@mail.mil.

(05/16/2019) The NISP eMASS application will be unavailable Thursday, May 16, 2019, from 8 a.m.-2 p.m. ET, due to a scheduled Authorized Service Interruption (ASI) by Defense Information Systems Agency (DISA). This ASI is a follow-up to the DISA Datacenter hardware and OS failure impacting the eMASS NIPR environment on January 22.

We apologize for the inconvenience. Please Contact NAO eMASS, dcsa.quantico.dcsa.mbx.emass@mail.mil, if you have any questions or concerns.

(03/18/2019) The National Industrial Security Program (NISP) Enterprise Mission Assurance Support Service (eMASS) is scheduled to be operational on May 6, 2019. Industry partners should continue to use the ODAA Business Management System (OBMS) until then. Work with your local Information Systems Security Professional and/or ISSP Team Lead to complete the required training to ensure readiness for the transition.

The NISP Authorization Office posted a job aid, https://www.dss.mil/Portals/69/documents/io/emass/NISP_EMASS_Training_Access_Procedures_Guide_1_14.pdf, that provides cleared industry security professionals with instructions on how to access the training and for DSS sponsorship instructions regarding External Certification Authority (ECA) Certificates and RMF Knowledge Service Sponsorship.

The following are the step-by-step procedures to request a NISP eMASS account and complete the training:

1. Complete DISA eMASS Computer Based Training (CBT)

2. Complete DISA Cyber Awareness Challenge (CAC) training

3. Complete DSS IO (pre-populated) System Authorization Access Request (SAAR) form

4. Submit the completed artifacts (DD 2875 SAAR, CAC certification, and eMASS training completion certification) to DSS NAO eMASS mailbox: dcsa.quantico.dcsa.mbx.emass@mail.mil

Send questions and inquiries to the NAO eMASS mailbox at: dcsa.quantico.dcsa.mbx.emass@mail.mil.

(02/15/2019) The DSS NISP Authorization Office (NAO) has postponed the eMASS transition until May 6, 2019. Cleared industry partners should continue to work with their ISSPs and Team Leads to complete the required eMASS training and request a NISP eMASS account to ensure readiness for the transition. Job aids are posted on the NISP eMASS Information and Resource Center.

With the postponement of the eMASS transition, the DSS Assessment and Authorization Process Manual (DAAPM) Version 2.0 will be delayed. The revised release date is April 8, 2019, with an effective date of May 6, 2019.

Industry partners should continue to submit all System Security Plans (SSP) and supporting artifacts via the ODAA Business Management System (OBMS).

Questions and inquiries regarding eMASS are handled through the NAO eMASS mailbox: dcsa.quantico.dcsa.mbx.emass@mail.mil. Questions and inquiries regarding the DAAPM are handled through the NAO mailbox: dss.quantico.dss-hq.mbx.odaa@mail.mil.

(02/01/2019) NAO has provided additional information on NISP-eMASS account requirements. Please see the "Account Management" tab for more information.

(12/04/2018) The eMASS transition is anticipated to begin in March 2019. Until then, NISP Industry partners will submit all System Security Plans (SSP) and supporting artifacts via the ODAA Business Management System (OBMS). NISP Industry partners should continue to work with designated Information Systems Security Professional (ISSP) and/or ISSP Team Lead to complete the required eMASS training to ensure readiness for the transition.

To request a NISP-eMASS account, cleared Industry must complete:

  1. DISA eMASS Computer Based Training (CBT)
  2. DISA Cyber Awareness Challenge (CAC) training
  3. DSS IO (pre-populated) System Authorization Access Request (SAAR) form
  4. Submit all artifacts to DSS NAO eMASS mailbox dcsa.quantico.dcsa.mbx.emass@mail.mil
  5. Access NISP eMASS instance and register user profile.https://emass-nisp.csd.disa.mil/App/Home/Inbox(See NISP eMASS Account Request and Access Procedures guide for more information)

Note: Please see the “Training” tab for the links to CBT and CAC training. A certificate of completion is required for the CBT and CAC training.

* If you are having trouble accessing the NISP-eMASS CBT or RMF Knowledge Service site, please review the NISP-eMASS Training Access and Procedures Guide for DSS Sponsorship instructions regarding External Certification Authority (ECA) Certificates and RMF Knowledge Service Sponsorship.

NISP eMASS application issues:
Contact the DISA eMASS Help Desk:
Email: disa.global.servicedesk.mbx.ma-ticket-request@mail.mil
Commercial Phone: 1-(844)-347-2457 Options 1, 3

 

RMF Knowledge Service application issues:
Contact the RMF Technical Inquiries Team at:
osd.pentagon.dod-cio.mbx.support-rmfknowledgeservice@mail.mil
The following information must be included with each help desk ticket submission:

  • Contact information
  • Domain: NIPR
  • Errors: What type of error? What does the error say? When do you receive the error (if possible, attach a screenshot)?

 

User Account/CAGE code container issues/inquiries:
Contact the DCSA NISP eMASS Mailbox:
dcsa.quantico.dcsa.mbx.emass@mail.mil

 

System Administrator inquiries:
Contact the DCSA NISP eMASS Mailbox:
dcsa.quantico.dcsa.mbx.emass@mail.mil