Package Completeness
91.2%
31 of 34 controls fully satisfied
Open POA&M Flaws
3
1 Critical (CISA KEV) · 2 High
Recommended ATO Posture
ATO-C
Conditional Authorization (90-day review)
Families Covered
20 / 20
Complete NIST SP 800-53 Rev. 5
Target Information System
Aether Command Platform (SYS-AETHER / AETHER-C2)
Boundary: AWS GovCloud VPC, EKS cluster, Aurora PostgreSQL, S3 encrypted mission stores, transit gateway to cross-domain solution, and Entra ID IAM.
Control Family Health (All 20 NIST SP 800-53 Rev. 5 Families)
Live Telemetry SynchronizedActive Authorization Blockers Action Required Before Full ATO
Critical · KEV
POAM-103 · SI-2
CISA KEV flaw CVE-2026-44102 open beyond mandatory 14-day federal directive on win-ops-12.
Due Nov 04, 2026
14-day SLA
High
POAM-101 · AC-2
17 terminated personnel identities remain active > 24 hours post-termination; 14 inactive accounts > 30d.
Due Nov 20, 2026
30-day SLA
High
POAM-102 · CM-6
DISA STIG benchmark pass rate is 88.5%, breaching mandatory 95% compliance baseline on container images.
Due Nov 20, 2026
30-day SLA