September 27, 2023

Navigating the Risk Management Framework (RMF) for DoD and Government Agencies

In today's tech-driven world, safeguarding sensitive data and critical systems is a top priority, especially for government agencies, including the Department …

RMF DoD Compliance NIST

Read Article

June 28, 2023

NIST SP 800-53: WHAT’S THE DELTA FROM REV. 4 TO REV. 5?

BY KATHRYN DAILY, CISSP, CGRC (FORMERLY CAP), RDRP NIST SP 800-53 (National Institute of Standards and Technology Special Publication 800-53) provides a set of …

NIST RMF

Read Article

February 8, 2022

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

By Lon J. Berman, CISSP, RDRP Welcome to 2022! It’s now been well over a year since the release of NIST SP 800-53 Rev 5, yet Rev 4 remains the DoD standard. …

RMF NIST DoD Compliance

Read Article

January 12, 2021

DFARS Compliance with CMMC/NIST SP 800-171

By Marilyn Fritz, CISSP, CISA, ITIL, PMP The new DFARS Interim Rule that went into effect November 30, 2020 is a game changer for any entities that have or are …

NIST CMMC DoD Compliance

Read Article

January 12, 2021

NIST Rev. 5 Supplemental Materials

By Kathryn Daily, CISSP, CAP, RDRP Back in September of last year (2020), NIST finally published the final version of Special Publication 800-53 Revision 5. …

NIST RMF

Read Article

November 12, 2019

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

By Lon J. Berman, CISSP, RDRP Just when folks were beginning to get somewhat comfortable … or, at least, familiar … with the Risk Management Framework (RMF), …

Cybersecurity NIST DoD Compliance

Read Article

April 15, 2019

NIST Privacy Framework: An Update

By Kathryn Daily, CISSP, CAP, RDRP Back in September 2018, NIST announced their plans to develop a data privacy framework based off their cybersecurity …

NIST Privacy

Read Article

January 11, 2019

NIST 800-37 Rev 2: It’s Official!

By Kathryn Daily, CISSP, RDRP NIST has officially released NIST 800-37 Rev 2 and dubbed it as “RMF 2.0.” The framework has been updated to include both …

RMF NIST

Read Article

October 5, 2018

The Newest NIST Framework: The NIST Privacy Framework

By Kathryn Daily, CISSP, CAP, RDRP NIST has announced the development of a Privacy Framework. The framework is needed to ensure the ability to design, operate, …

NIST Privacy

Read Article

July 17, 2018

NIST 800-171: Confusion and the Protest Docket

By Kathryn Daily, CISSP, RDRP I’m sure by now you’ve at least familiarized yourself with NIST 800- 171, “Protecting Unclassified Information in Nonfederal …

NIST DoD Compliance

Read Article

July 17, 2018

NIST 800-37 Rev. 2

By Lon J. Berman CISSP, RDRP The National Institute of Standards and Technology (NIST) is in the process of preparing Special Publication (SP) 800-37 Rev 2 for …

RMF NIST

Read Article

May 9, 2018

NIST Updates RMF to Incorporate Privacy Considerations

Interesting press release just put out stating that NIST is updating the RMF to incorporate privacy considerations. Full release can be found here.

NIST RMF Privacy

Read Article

February 5, 2018

NIST 171—What’s That?

By Kathryn Daily, CISSP, RDRP If you heard a whooshing sound on New Years Eve, that was probably the deadline for compliance with NIST 171 flying by. A lot of …

NIST DoD Compliance

Read Article

April 13, 2017

NIST SP 800-53 Rev 5—Big Changes Coming?

By Lon Berman, CISSP of BAI Information Security As you probably know, the “catalog” of security controls used in RMF is derived from NIST Special Publication …

NIST RMF

Read Article

January 30, 2017

Top Ten—Documentation Recommendations

By Lon J. Berman, CISSP BAI Information Security Supporting documentation (aka. artifacts) is key to providing evidence of compliance with security controls. …

RMF NIST

Read Article

March 7, 2016

Building A Security Control Baseline “Step-by-Step”

Article By Lon J. Berman, CISSP In the last issue of RMF Today and Tomorrow, we walked through the System Categorization process step-bystep. Now that we’ve …

RMF NIST

Read Article

November 19, 2015

RMF’s System Categorization: Step by Step

In this blog post Lon Berman, CISSP talks about the sub-steps of the first RMF step, System Categorization. Step 1: Identify Information Types The first and …

RMF NIST

Read Article

July 13, 2015

Common Controls and Inheritance

By Kathryn M. Farrish, CISSP Common Controls are security controls whose implementation results in a security capability that is inheritable by multiple …

RMF NIST

Read Article

July 8, 2015

System Categorization-Take the Time to Get it Right

By Lon J. Berman, CISSP The story is told of an intern who is asked by his boss to pick up some items from the supply room in the basement. The young man is not …

RMF NIST

Read Article

November 5, 2014

Top Ten—Sources of RMF Policy and Guidance

By Annette Leonard of BAI, Inc. RMF-related policies and guidance come from a plethora of sources within the seemingly-convoluted federal landscape. We believe …

RMF NIST

Read Article

October 31, 2014

Significant Update to NIST SP 800-53A

By Kathryn M. Farrish, CISSP of BAI, Inc. At long last, NIST has finally released a draft copy of the updated version of SP 800-53A, entitled Assessing Security …

NIST RMF

Read Article

April 9, 2014

RMF Documents and Resources

For your convenience, ITdojo has assembled the following collection of RMF-related government publications. Please note these are UNCLASSIFIED documents with no …

RMF NIST

Read Article

NIST

Navigating the Risk Management Framework (RMF) for DoD and Government Agencies

NIST SP 800-53: WHAT’S THE DELTA FROM REV. 4 TO REV. 5?

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

DFARS Compliance with CMMC/NIST SP 800-171

NIST Rev. 5 Supplemental Materials

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

NIST Privacy Framework: An Update

NIST 800-37 Rev 2: It’s Official!

The Newest NIST Framework: The NIST Privacy Framework

NIST 800-171: Confusion and the Protest Docket

NIST 800-37 Rev. 2

NIST Updates RMF to Incorporate Privacy Considerations

NIST 171—What’s That?

NIST SP 800-53 Rev 5—Big Changes Coming?

Top Ten—Documentation Recommendations

Building A Security Control Baseline “Step-by-Step”

RMF’s System Categorization: Step by Step

Common Controls and Inheritance

System Categorization-Take the Time to Get it Right

Top Ten—Sources of RMF Policy and Guidance

Significant Update to NIST SP 800-53A

RMF Documents and Resources

All Topics

Need Training?