January 24, 2017
In the World I See…
My time in the IT world is closer to three decades than two. And anyone else who has been around half as long can testify to the amount of change that has…
Read ArticleBlog
Blog
IT Dojo blog: expert insights on cybersecurity, RMF, DoD compliance, certifications, networking, and federal IT. Updated regularly by our instructors.
January 13, 2017
Certification Suckers
Who really benefits when you get certified, you or the vendor? A candid look at why vendors push certifications and how IT pros can make them pay off.
Read Article
September 16, 2016
Security Control Spotlight: Contingency Planning
A look at the RMF Contingency Planning (CP) control family: what disaster recovery and continuity plans must cover and how requirements scale.
Read Article
September 16, 2016
Top Ten RMF Pitfalls Revisited
Like any complex process, RMF is not without its share of potential pitfalls. Now that we have the benefit of some more RMF projects under our belt, we…
Read Article
September 16, 2016
Understanding the Authorization Decision
Most system owners expect an Authorization to Operate from their RMF efforts. Here is what the AO decision really involves.
Read Article
June 8, 2016
Top Ten: RMF “Lessons Learned”
I recently had the pleasure of consulting for a DoD program that successfully navigated the RMF process and received a full three year Authorization to…
Read Article
June 7, 2016
Security Control Baseline “Tabletop Review”
Let’s take a look at some strategies for reviewing the Security Control Baseline and creating “action plans” for implementation.
Read Article
June 1, 2016
Security Control Spotlight: Inheritance
Security control inheritance can speed up the RMF process but is often misapplied. What it means, how it works, and how to document it correctly.
Read Article
April 27, 2016
Learning More About Apple iOS9 MAC Address Randomization
Apple uses a variety of scans for wireless LAN/physical location information. There are Preferred Network Offload (PNO) Scans, Enhanced Preferred Network…
Read Article
March 11, 2016
Security+ CEU Question and Answer
I recently had a client who had a Security+ certification that was about to expire and he asked me a question that I wanted to share with our readers.
Read Article