ControlGrid
Controls are evidenced once, for the ATO, by a team that assembles the package by hand. Then the system keeps changing and the evidence does not.
By the next assessment nobody can tell which controls still hold, so the work is done again from the beginning.
What ControlGrid is
ControlGrid is Softek's federal governance, risk and compliance platform, focused on ATO assembly and continuous compliance. It draws on the control evidence that Axiom's stage gates already generate during delivery, so the authorization package reflects the system as it actually stands rather than as it stood at a point in the past.
What it covers
ATO assembly
- Authorization package assembly from evidence captured during delivery
- Control narratives tied to the artifacts that substantiate them
- POA&M tracking carried forward from the build record
Continuous compliance
- Control status maintained after authorization, not only at assessment
- Security documentation currency tracked against system change
- Stage-gate evidence packages at requirements, design, code, security, release and post-deployment
How it is engaged
- ControlGrid operates inside Softek's environment. It does not process client confidential data.
- No proprietary Softek runtime is required in the client environment.
- There is no separate software license or hosting fee. The Government pays for outcomes and deliverables.
- Deliverables are Government-owned and maintainable with or without Softek tooling. No vendor lock-in.
- All outputs are directed, reviewed and approved by Softek engineers.
Talk to us about your ATO
Tell us where your authorization package stands. We will show you what continuous evidence looks like on your program.
8(a) sole source up to $4.5M. HUBZone. GSA MAS 47QTCA18D007G.