Authorized NARA personnel only. All activity is monitored and logged.

CHAZAK.AI BIG-OPS v1.0

U.S. flag

An official website of the United States government

NARA Overview

Overview

NARA AI Operations Center

Real-time intelligence across ERA (AWS), CMRS (Salesforce), and NARANet. Powered by Claude AI via CHAZAK.AI BIG-OPS.

3

Critical CVEs

11

Pending Requests

847

Forms Processed

97%

Sync Health

Recent Activity

  • Admin access request — a_amyrick

    2 min ago · Auto-routed to IOO

    Done

  • CVE-2024-3094 detected — na2-sftpmgm-01

    14 min ago · CVSS 9.8

    Critical

  • ERA ↔ CMRS sync — 12,847 records

    22 min ago · All systems nominal

    Synced

  • 38 forms processed via AI auto-fill

    Today · 94% accuracy

    Done

System Health

ERA — Records Processed 12,847 / 15,000

CMRS — Cases This Month 341 / 400

NARANet — AD Accounts 4,219 / 5,000

AI Analysis — Today 38 / 50

Use Case 01

Smart Form Automation

AI reads uploaded NARA forms and extracts structured fields in seconds — with risk scoring and auto-routing included.

Admin Access Change Request

AI Risk Assessment

Click "AI Extract & Analyze" to assess access risk

Processing Pipeline

Document Extraction
Parse DOCX → structured fields
Field Validation
Username, email, AD group check
AI Risk Scoring
Claude analyzes access risk
Smart Routing
Auto-route to correct approver
ServiceNow Ticket
Auto-create ITSM ticket

Use Case 02

Security Vulnerability Intelligence

Live vulnerability scan across NARA infrastructure — real CVEs, AI-generated remediation, one-click patching.

Hostname IP Address Role OS Scan Status
nara-web-01 129.213.61.168 Web Server Ubuntu 22.04 NOT SCANNED
nara-db-01 150.136.240.18 DB Server Ubuntu 22.04 NOT SCANNED

Use Case 03

Multi-System Data Consolidation

Unified intelligence across ERA (AWS), CMRS (Salesforce), and NARANet/AD.

ERA

NARA AWS Tenant · Electronic Records Archive

Live

CMRS

Salesforce Cloud · Case Mgmt & Requests

Live

NARANet / AD

On-Premises · Identity & Access Mgmt

Syncing

Unified Record — NARA-2024-8841

FROM ERA · NARA AWS

ERA Record IDERA-44291-2024
Assetna2-sftpmgm-01.win.nara.gov
Last AuditJun 14, 2024

FROM CMRS · SALESFORCE

Case NumberCMRS-2024-08841
RequestorAbigail Myrick
StatusPending Review

FROM NARANET · ACTIVE DIRECTORY

AD Usernamea_amyrick
Target GroupSG_ServerAdmin_SftpMgm
StatusActive

AI Cross-System Analysis

Click "Analyze" for live AI cross-system insight

Natural Language Query

Use Case 04 — New

AI Workflow Automation

AI generates ServiceNow workflow code and orchestrates multi-stage approval chains — replacing days of manual development.

User Submits
SNOW Form
L1 Approval
Supervisor
L2 Approval
NARA Leadership
RITM Created
→ TCSTI Tier 2
Fulfilled
Access Granted

L2 only triggers after L1 is approved · Rejection at any stage closes the request · SLA: 48h per stage

AI Code Generator

Workflow Requirements

  • • Form: Admin Access Change Request (SNOW catalog item)
  • • L1: Route to submitted_by.manager
  • • L2: NARA Leadership group — only after L1 approved
  • • Both approved → RITM assigned to TCSTI Tier 2

Click "Generate Workflow Code" to produce AI-written SNOW code

AI vs Manual Dev

Manual Dev

2 days

With AI

30 sec

RITM Ticket Preview

NumberRITM0094821
Requested byAbigail Myrick
Assigned toTCSTI Tier 2
L1 ApproverPending
L2 ApproverWaiting for L1

Use Case 05

SSL/TLS Certificate Management

AI generates CSRs, tracks certificate expiry across all NARA systems, and automates the renewal workflow — eliminating the most time-consuming IT compliance task.

2

Expiring <30 days

3

Expiring <90 days

19

Valid

24

Total Managed

Certificate Inventory

Common NameSystemIssuerExpiryDays LeftStatusAction
nara-web-01 LIVE NARANet Web (129.213.61.168)Self-Signed Oct 13, 2026 11 days Critical
nara-db-01 LIVE NARANet DB (150.136.240.18)Self-Signed Oct 13, 2026 11 days Critical
na2-sftpmgm-01.win.nara.gov NARANet SFTPDigiCert Federal Aug 14, 2025 11 days Critical
kiteworks.nara.gov Kiteworks GatewayDigiCert Federal Aug 28, 2025 25 days Critical
era-app.nara.aws.gov ERA (AWS)AWS ACM Sep 22, 2025 50 days Warning
cmrs.nara.gov CMRS (Salesforce)Salesforce CA Oct 15, 2025 73 days Warning
vpn.nara.gov NARANet VPNDigiCert Federal Feb 10, 2026 191 days Valid
mail.nara.gov NARA Mail ServerDigiCert Federal Mar 4, 2026 213 days Valid

Renewal Timeline

na2-sftpmgm-0111 days
kiteworks.nara.gov25 days
era-app.nara.aws.gov50 days
cmrs.nara.gov73 days
vpn.nara.gov191 days

AI Advantage

Manual

4 hrs

per renewal

With AI

5 min

CSR to submit

  • Auto-detects expiring certs across all systems
  • Generates correct CSR with NARA fields pre-filled
  • Validates SAN entries before submission
  • Routes renewal approval via ISSO workflow
  • Verifies installation after cert is applied

Certificate Authorities

DigiCert Federal14 certsActive
AWS ACM6 certsActive
Salesforce CA3 certsActive
Internal NARA CA1 certActive

System

Audit Log

All AI interactions, form submissions, and system events — logged for compliance and traceability.

TimestampUserActionSystemAI UsedResult
2024-06-15 14:22:01adminForm AI ExtractNARANet / ADClaudeSuccess
2024-06-15 14:08:44nara.userCVE Remediation Planna2-sftpmgm-01ClaudeSuccess
2024-06-15 13:51:20adminData Consolidation SyncERA + CMRS + ADClaudeSuccess