Coordinate, maintain, change, and keep updated, the Risk Management Framework (RMF) Assessment and Authorization (A&A) packages for the five enclaves administered by AFOSI. Develop and complete System Security Documents in accordance with the RMF Process. Monitor policy for the IT Enterprise Cyber Surety Division relating to the compliance, validation, and assessment of the four networks (NIPRNET, SIPRNET, JWICS, and SAPnet) and Major Information Technology Systems (MITS). Maintain and update HQ's AFOSI Governance, Risk and Compliance (GRC) application for assessing/managing risk, and authorizations for all AFOSI data networks. Implement Cybersecurity controls and assist AFOSI customers with the implementation on Cybersecurity controls where the Cybersecurity controls fall outside of the contractor’s area of responsibility. Continuously monitor for control compliance and take immediate actions to bring systems into compliance. Ensure that all application deliverables comply with the DISA Application Security & Development and Database STIGs, which includes the need for source code scanning and a Web Penetration Test to mitigate vulnerabilities (including as examples, SQL injections, cross-site scripting, and buffer overflows).  Ensure successful implementation and tracking of all Tasking Orders (TASKORD), General Administration Messages (GENADMIN)), Notice to Airmen (NOTAM), Time Compliance Technical Order (TCTO), Data Call Orders (DCO) for the systems included in the five AFOSI enclaves.  Perform the Information Assurance Vulnerability Management (IAVM) process by ensuring systems and networks maintain compliance with vulnerabilities.Track and analyze Plan of Action & Milestones (POA&Ms) reports to conduct risks assessments.Review current Cyber Operational Readiness Assessment (CORA) requirements and ensure systems and their operations are compliant.  Perform self-inspections every nine months and routinely as needed.