Cloud Security and FedRAMP. Are you Ready for it?

DIACAP Training, DIARMF, DoD 8570 Compliance, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Northern Virginia, Training, Training in Virginia Beach

A deadline for federal agencies to adhere to the government’s baseline cloud security standards and changes to the standards themselves are coming up very soon. The deadline for agencies to have their existing cloud computing solutions assessed against the Federal Risk and Authorization Management Program, or FedRAMP is June 5, 2014 Read more about this…

DoD (Finally) Begins Transition to RMF

DIACAP Training, DIARMF, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Remote Online Training, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

By Lon J. Berman, CISSP BAI Consulting The wait is over! RIP DIACAP!! At long last, DoD has announced the start of transition from the legacy DIACAP Certification and Accreditation (C&A) Program to the Risk Management Framework (RMF). This transition is part of a broader effort to bring all Executive Branch departments and agencies ……

Top 10 Things that Will Be Staying the Same with RMF

IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

By Lon J. Berman, CISSP BAI Consulting As DoD begins its transition from DIACAP to Risk Management Framework for DoD IT, everyone is naturally focused on all the things that will be changing—everything from terminology to documentation to security controls. Thankfully, not everything is changing! We thought it would be interesting to take a look…

RMF Documents and Resources

DIACAP Training, DIARMF, Information Assurance, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

For your convenience, ITdojo has assembled the following collection of RMF-related government publications. Please note these are UNCLASSIFIED documents with no restrictions on usage or distribution. Laws and Executive Branch Policies Federal Information Security Management Act (FISMA)  OMB Circular A-130 Appendix III (Security of Federal Information Systems)  Federal Information Processing Standard (FIPS) Publications FIPS 199…

Top Ten—What’s “new” in RMF for DoD IT?

DIACAP Training, DIARMF, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

By Lon J. Berman, CISSP BAI Consulting Now that DoD has “officially” begun its adoption of RMF, let’s take a look at some of the things that are “new”! 10. Cybersecurity. The word “Cybersecurity” has been part of the government IT security discussion for several years, going back to a Presidential Directive in 2008. DoD has now adopted the term Cybersecurity in…

DIACAP Says “So Long”

CISSP, DIACAP Training, DoD 8570 Compliance, Information Assurance, Risk Management Framework, RMF Training, Security, Training, Training in Virginia Beach

On March 12, 2014 the DoD released a new policy that makes it official that the DoD Information Assurance Certification and Accreditation Process (DIACAP) is being put to bed in favor of a “new” Risk Management Framework (RMF).  The news is not a revelation as it has been in the works for a few years…

Is Your Post 2011 Security+ Cert About to Expire? Get CE Credits Now!

Computer Network Training, DoD 8570 Compliance, Networking Tools, Security, Security+ CE, Self Paced Training, Training, Training in Virginia Beach

As many of you know, if you received your Security+ certification after 2011, you are not eligible for lifetime Security+ status. Before that you were grandfathered in, but if your is after 2011 you are out of luck. No every 3 years you must renew your certification by either retaking the exam, or by completing…