March 1, 2016
Top Ten: Questions for your Authorizing Official
Ten questions to ask your Authorizing Official (AO) early in the RMF process so your system is on track for an Authorization to Operate (ATO).
Read ArticleBlog
Blog
IT Dojo blog: expert insights on cybersecurity, RMF, DoD compliance, certifications, networking, and federal IT. Updated regularly by our instructors.
February 18, 2016
The Danger of Transparent Encryption
With all the renewed furor over the government attempting to force Apple to backdoor iOS devices so the FBI can inspect the phone of the San Bernardino…
Read Article
January 25, 2016
The Altruism of IPv6
Colin discusses the slow migration to IPv6: who pays for the migration versus who gains the biggest benefit. An altruism problem.
Read Article
January 24, 2016
You Geek? I Geek.
When is the last time you sat down at your desk and really went full-geek on something just because you found it fascinating?
Read Article
January 19, 2016
A Somewhat Brief Explanation of Password Entropy
Is a random 8-character password stronger than a long passphrase? Colin explains password entropy, how to calculate it, and what it means for password strength.
Read Article
December 13, 2015
Wrapped In Python – Edition 6 – Fibonacci Sequence
In this post Colin tackles the self-imposed challenge of figuring out how to generate the Fibonacci Sequence using python (without using Google)
Read Article
November 25, 2015
What is STIG Viewer (and why are there two answers)?
Security Technical Implementation Guides (STIGs) are published periodically by the Defense Information Systems Agency (DISA).
Read Article
November 24, 2015
The Top Ten STIGs
The Defense Information Systems Agency (DISA) is responsible for developing security guidance for configuring DoD information systems.
Read Article
November 23, 2015
Security Control Spotlight: A Little Good News?
Imagine this dialog between Edward, a System Owner, and Christine, his Information System Security Manager (ISSM): Edward (System Owner):“Now that we’ve…
Read Article
November 18, 2015
The Best CBK Domain. And Why.
After more than a decade as a CISSP, Colin names his favorite domain of the CISSP Common Body of Knowledge (CBK) and explains why it matters most.
Read Article