Name: eMASS Simulator Training
Price: 1500.00 USD
Availability: InStock

The Enterprise Mission Assurance Support Service (eMASS) is the mandatory "system of record" for DoD RMF. This course provides practical, hands-on experience in the tool itself, bridging the gap between RMF policy and actual data entry.

This one-day course provides focused instruction on eMASS (Enterprise Mission Assurance Support Service), the Department of Defense’s centralized system for managing cybersecurity risk and system authorization. Participants receive hands-on experience navigating the eMASS platform, developing and submitting authorization packages, and understanding how eMASS supports the RMF process, including practical exercises using a custom-built eMASS simulator.

Why train on a Simulator?

Learning eMASS on a live production system is dangerous and stressful. One wrong click can alter an authorization boundary.

No CAC Card Required for training
Practice "Admin" privileges without risk
Reset and try again instantly

Who Should Attend?

ISSEs & ISSOs

Users who manage the daily inputs, artifacts, and test results.

Validators

SCA-Rs who need to efficiently review packages and apply risk scores.

PMs / Gov

Managers needing to pull high-level reports and dashboards.

Course Workflows

System Registration

Creating a new system record. Defining the Authorization Boundary. Managing user roles and permissions correctly.

Controls & Artifacts

The bulk of the work. Uploading evidence, mapping artifacts to multiple controls, and writing implementation statements directly in the tool.

Scan Imports

The technical workflow. Importing ACAS (Nessus) scans and STIG checklists. Handling the "Asset Manager" to ensure scan matching.

POA&M Management

Lifecycle management. Creating milestones, closing vulnerability items, and managing the ongoing Plan of Action and Milestones.

Frequently Asked Questions

Is access to eMASS required for this class?

Access to eMASS is not required to attend this class.

What are the course prerequisites?

There are no formal prerequisites for this course; however, a basic understanding of information security principles and familiarity with compliance and regulatory requirements are helpful. Knowledge of concepts such as confidentiality, integrity, availability, risk assessment, and vulnerability management is beneficial. Prior experience in IT or cybersecurity is recommended to support a more effective learning experience.

Does this cover Classified eMASS?

The functionality between Unclassified and Classified eMASS is identical. We train on the Unclassified feature set, but the skills transfer 1:1 to SIPRNet/JWICS instances.

Is this an official DISA course?

No, this is third-party training. Official DISA training is often free but theoretical. Our training is practical, focusing on "how to get the job done" rather than just buttonology.

eMASS Simulator Training