August 17, 2026

NIST CSF 2.0: What Changed and How It Affects Your Organization

A practical breakdown of NIST Cybersecurity Framework 2.0, the new Govern function, expanded supply chain guidance, and what security teams should do next.

NIST Compliance Risk Management Cybersecurity

Read Article

September 27, 2023

Navigating the Risk Management Framework (RMF) for DoD and Government Agencies

In today's tech-driven world, safeguarding sensitive data and critical systems is a top priority, especially for government agencies, including the…

RMF DoD Compliance NIST

Read Article

June 28, 2023

NIST SP 800-53: WHAT’S THE DELTA FROM REV. 4 TO REV. 5?

NIST SP 800-53 (National Institute of Standards and Technology Special Publication 800-53) provides a set of security and privacy controls for information…

NIST RMF

Read Article

February 8, 2022

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

Welcome to 2022! It’s now been well over a year since the release of NIST SP 800-53 Rev 5, yet Rev 4 remains the DoD standard.

RMF NIST DoD Compliance

Read Article

January 12, 2021

NIST Rev. 5 Supplemental Materials

Back in September of last year (2020), NIST finally published the final version of Special Publication 800-53 Revision 5.

NIST RMF

Read Article

November 12, 2019

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

Just when folks were beginning to get somewhat comfortable … or, at least, familiar … with the Risk Management Framework (RMF), along come our friends at…

Cybersecurity NIST DoD Compliance

Read Article

April 15, 2019

NIST Privacy Framework: An Update

Back in September 2018, NIST announced their plans to develop a data privacy framework based off their cybersecurity framework that has been extremely…

NIST Privacy

Read Article

January 11, 2019

NIST 800-37 Rev 2: It’s Official!

NIST has officially released NIST 800-37 Rev 2 and dubbed it as “RMF 2.0.” The framework has been updated to include both cybersecurity and privacy to be…

RMF NIST

Read Article

October 5, 2018

The Newest NIST Framework: The NIST Privacy Framework

NIST has announced the development of a Privacy Framework. The framework is needed to ensure the ability to design, operate, or use technologies in ways…

NIST Privacy

Read Article

July 17, 2018

NIST 800-171: Confusion and the Protest Docket

I’m sure by now you’ve at least familiarized yourself with NIST 800- 171, “Protecting Unclassified Information in Nonfederal Information Systems and…

NIST DoD Compliance

Read Article

July 17, 2018

NIST 800-37 Rev. 2

The National Institute of Standards and Technology (NIST) is in the process of preparing Special Publication (SP) 800-37 Rev 2 for publication.

RMF NIST

Read Article

May 9, 2018

NIST Updates RMF to Incorporate Privacy Considerations

Interesting press release just put out stating that NIST is updating the RMF to incorporate privacy considerations. Full release can be found here.

NIST RMF Privacy

Read Article

February 5, 2018

NIST 171: What’s That?

If you heard a whooshing sound on New Years Eve, that was probably the deadline for compliance with NIST 171 flying by.

NIST DoD Compliance

Read Article

April 13, 2017

NIST SP 800-53 Rev 5: Big Changes Coming?

As you probably know, the “catalog” of security controls used in RMF is derived from NIST Special Publication (SP) 800- 53 Rev 4.

NIST RMF

Read Article

January 30, 2017

Top Ten: Documentation Recommendations

Supporting documentation (aka. artifacts) is key to providing evidence of compliance with security controls.

RMF NIST

Read Article

March 7, 2016

Building A Security Control Baseline “Step-by-Step”

Article By Lon J. Berman, CISSP In the last issue of RMF Today and Tomorrow, we walked through the System Categorization process step-bystep.

RMF NIST

Read Article

November 19, 2015

RMF’s System Categorization: Step by Step

In this blog post Lon Berman, CISSP talks about the sub-steps of the first RMF step, System Categorization.

RMF NIST

Read Article

July 13, 2015

Common Controls and Inheritance

Common Controls are security controls whose implementation results in a security capability that is inheritable by multiple information systems (IS).

RMF NIST

Read Article

July 8, 2015

System Categorization-Take the Time to Get it Right

The story is told of an intern who is asked by his boss to pick up some items from the supply room in the basement.

RMF NIST

Read Article

November 5, 2014

Top Ten: Sources of RMF Policy and Guidance

RMF-related policies and guidance come from a plethora of sources within the seemingly-convoluted federal landscape.

RMF NIST

Read Article

October 31, 2014

Significant Update to NIST SP 800-53A

At long last, NIST has finally released a draft copy of the updated version of SP 800-53A, entitled Assessing Security and Privacy Controls in Federal…

NIST RMF

Read Article

April 9, 2014

RMF Documents and Resources

For your convenience, ITdojo has assembled the following collection of RMF-related government publications.

RMF NIST

Read Article

NIST

NIST CSF 2.0: What Changed and How It Affects Your Organization

Navigating the Risk Management Framework (RMF) for DoD and Government Agencies

NIST SP 800-53: WHAT’S THE DELTA FROM REV. 4 TO REV. 5?

DoD Transition to NIST SP 800-53 Rev 5 … Why is it Taking so Long?

NIST Rev. 5 Supplemental Materials

Cybersecurity Framework – Is it relevant to Federal/DoD organizations?

NIST Privacy Framework: An Update

NIST 800-37 Rev 2: It’s Official!

The Newest NIST Framework: The NIST Privacy Framework

NIST 800-171: Confusion and the Protest Docket

NIST 800-37 Rev. 2

NIST Updates RMF to Incorporate Privacy Considerations

NIST 171: What’s That?

NIST SP 800-53 Rev 5: Big Changes Coming?

Top Ten: Documentation Recommendations

Building A Security Control Baseline “Step-by-Step”

RMF’s System Categorization: Step by Step

Common Controls and Inheritance

System Categorization-Take the Time to Get it Right

Top Ten: Sources of RMF Policy and Guidance

Significant Update to NIST SP 800-53A

RMF Documents and Resources

All Topics

Need Training?

Get More Information