RMF Checklist — The ISSO’s Complete Guide to All 7 Steps


Stop guessing what comes next. All 7 RMF steps broken into 100+ concrete tasks — the checklist the government never gives you.

Excel (.xlsx) · Mac, Windows & Google Sheets · Instant download · Free updates for life

The government doesn’t hand you a checklist

Most ISSOs learn RMF by doing it — which means missing steps, getting caught by SCAs, and scrambling before authorization deadlines. Every package becomes a game of “what did I forget this time?”

I got tired of that. So I built the checklist I wish someone had handed me — and refined it across real DoD ATO packages.

What’s inside

  • 7 step-by-step tabs — Prepare → Categorize → Select → Implement → Assess → Authorize → Monitor
  • 100+ specific tasks with exact NIST SP 800-37 Rev 2 references
  • Live dashboard showing your ATO completion percentage
  • Status dropdowns — Complete / In Progress / Not Started / Blocked / N/A
  • Responsible party, due date, and evidence columns
  • 22-document NIST reference sheet

Who this is for

  • New ISSOs who want to understand the full RMF process end-to-end
  • ISSOs managing their first ATO who don’t want to miss a task
  • Seasoned ISSOs who want a cleaner way to track progress
  • Anyone supporting multiple systems who needs consistent documentation

One-time purchase · No subscription

$27

Excel (.xlsx) · Works on Mac, Windows, and Google Sheets

Instant download after purchase · Free updates for life

Frequently asked questions

Does this work for DoD systems?

Yes. It follows NIST SP 800-37 Rev 2 and is aligned with DoD 8510.01 RMF requirements.

Is this eMASS compatible?

It complements eMASS — use it to track your progress and prep your entries. It doesn’t replace eMASS.

Can I use this for multiple systems?

Yes — duplicate the file for each system you support.

Your next ATO doesn’t have to be a scramble.