January 12, 2021
Welcome, Step 0
By Lon J. Berman, CISSP, RDRP Q. The Risk Management Framework (RMF) life cycle is comprised of how many steps? A. Oh, that’s easy, it’s six. Well … not so …
Read ArticleBlog
Blog
IT Dojo blog: expert insights on cybersecurity, RMF, DoD compliance, certifications, networking, and federal IT. Updated regularly by our instructors.
January 16, 2020
CMMC – What We Know and What We Don’t
By Kathryn Daily, CISSP, CAP, RDRP So by now, I’m sure you’ve seen a ton of articles on the Cybersecurity Maturity Model Certification (CMMC) initiative. A lot …
Read Article
November 12, 2019
Ask Dr. RMF!
Dear Dr. RMF, I work in an Army program and I feel like I am getting the hang of RMF, but when the heck do I schedule an independent assessment (SCA-V)? Show Me …
Read Article
November 12, 2019
CMMC Is Here!
By Kathryn Daily, CISSP, CAP, RDRP So, in the last edition of the newsletter I wrote about the need for verification of NIST 171 compliance from DoD …
Read Article
November 12, 2019
Cybersecurity Framework – Is it relevant to Federal/DoD organizations?
By Lon J. Berman, CISSP, RDRP Just when folks were beginning to get somewhat comfortable … or, at least, familiar … with the Risk Management Framework (RMF), …
Read Article
April 17, 2019
Where to Find CISSP Practice Questions?
We constantly get asked "Where is the best place to find CISSP practice questions?" and "What sort of resources can you share with me to help me prepare for the …
Read Article
April 15, 2019
Ask Dr. RMF
Dear Dr. RMF, Government IT Security staff work with systems owners to make sure that all systems in the agency have implemented the proper Risk Management …
Read Article
April 15, 2019
Security Control Inheritance
By Lon J. Berman CISSP, RDRP CNSSI 4009 defines Security Control Inheritance as “a situation in which an information system or application receives protection …
Read Article
April 5, 2019
How Much Information is in a Message?
"How much information is in a message?" Huh??? That sentence, in the context of typical use of those words (information & message), doesn't immediately make …
Read Article