Monthly Archives: July 2018

You are here:

Home
2018
July

NIST 800-37 Rev. 2

Information Assurance, Risk Management Framework, RMF Training, Training, Training in Virginia BeachBy Nick Webb July 17, 2018

By Lon J. Berman CISSP, RDRP The National Institute of Standards and Technology (NIST) is in the process of preparing Special Publication (SP) 800-37 Rev 2 for publication. As you may know, NIST SP 800-37 is the publication that defines the Risk Management Framework (RMF) roles, responsibilities and life cycle process. A review of the…

NIST 800-171: Confusion and the Protest Docket

Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DCBy Nick Webb July 17, 2018

By Kathryn Daily, CISSP, RDRP I’m sure by now you’ve at least familiarized yourself with NIST 800- 171, “Protecting Unclassified Information in Nonfederal Information Systems and Organizations.” What wasn’t made clear was how DoD will evaluate a contractor’s System Security Plan (SSP). In May, DoD released draft DoD Guidance for Reviewing System Security Plans and…