June 28, 2023

NIST SP 800-53: WHAT’S THE DELTA FROM REV. 4 TO REV. 5?

NIST SP 800-53 (National Institute of Standards and Technology Special Publication 800-53) provides a set of security and privacy controls for information…

NIST RMF

Read Article

June 28, 2023

RISK MANAGEMENT FRAMEWORK (RMF) TOMORROW: TRUTH OR FICTION?

Lon Berman separates truth from rumor about the future of the Risk Management Framework, including whether DoD will abandon RMF for its own approach.

RMF

Read Article

February 8, 2022

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

Welcome to 2022! It’s now been well over a year since the release of NIST SP 800-53 Rev 5, yet Rev 4 remains the DoD standard.

RMF NIST DoD Compliance

Read Article

May 25, 2021

Risk. What to Do With It.

Recently our regional grocery store chain notified their employees and customers that they had a data breach involving some HR data and pharmacy records.

Cybersecurity RMF

Read Article

May 25, 2021

RMF Across the Government Landscape

More than ten years ago, RMF came into existence with the intention of becoming the “unified information security framework for the federal government”.

RMF DoD Compliance

Read Article

January 12, 2021

NIST Rev. 5 Supplemental Materials

Back in September of last year (2020), NIST finally published the final version of Special Publication 800-53 Revision 5.

NIST RMF

Read Article

January 12, 2021

Welcome, Step 0

Q. The Risk Management Framework (RMF) life cycle is comprised of how many steps? A. Oh, that’s easy, it’s six. Well … not so fast.

RMF

Read Article

November 12, 2019

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

Just when folks were beginning to get somewhat comfortable … or, at least, familiar … with the Risk Management Framework (RMF), along come our friends at…