June 28, 2023

RISK MANAGEMENT FRAMEWORK (RMF) TOMORROW: TRUTH OR FICTION?

JULY 2023, VOLUME 15, ISSUE 3 When it comes to the future of RMF, rumors abound but truth is hard to come by.

RMF

Read Article

February 8, 2022

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

Welcome to 2022! It’s now been well over a year since the release of NIST SP 800-53 Rev 5, yet Rev 4 remains the DoD standard.

RMF NIST DoD Compliance

Read Article

May 25, 2021

Risk. What to Do With It.

Recently our regional grocery store chain notified their employees and customers that they had a data breach involving some HR data and pharmacy records.

Cybersecurity RMF

Read Article

May 25, 2021

RMF Across the Government Landscape

More than ten years ago, RMF came into existence with the intention of becoming the “unified information security framework for the federal government”.

RMF DoD Compliance

Read Article

January 12, 2021

NIST Rev. 5 Supplemental Materials

Back in September of last year (2020), NIST finally published the final version of Special Publication 800-53 Revision 5.

NIST RMF

Read Article

January 12, 2021

Welcome, Step 0

Q. The Risk Management Framework (RMF) life cycle is comprised of how many steps? A. Oh, that’s easy, it’s six. Well … not so fast.

RMF

Read Article

November 12, 2019

Ask Dr. RMF!

Dear Dr. RMF, I work in an Army program and I feel like I am getting the hang of RMF, but when the heck do I schedule an independent assessment (SCA-V)?

RMF DoD Compliance

Read Article

November 12, 2019

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

Just when folks were beginning to get somewhat comfortable … or, at least, familiar … with the Risk Management Framework (RMF), along come our friends at…