Skip to main content

Blog

Kathryn Daily
In Cybersecurity Framework

The NIST Cybersecurity Framework

By Marilyn Fritz, CISSP Cybersecurity is notoriously challenging, with every new day bringing more media stories about losses from endless breaches.  Beleaguered cybersecurity professionals are left coping with the onslaught and, more often than not, pleading for resources. Leaders in both private and public sectors all around the globe are…
Read More
Kathryn Daily
In NIST Privacy Framework

NIST Privacy Framework: An Update

By Kathryn Daily, CISSP, CAP, RDRP Back in September 2018, NIST announced their plans to develop a data privacy framework based off of their cybersecurity framework that has been extremely successful in both government and the private sector.  NIST has worked with industry through webinars and workshops and incorporated both public…
Read More
Lon Berman
In Dr. RMF, Risk Management Framework

Ask Dr. RMF

Dear Dr. RMF, First of all, just stumbled across this blog few days ago....awesome! There is piles of documentation but not enough community sourced help for the RMF process. I tried starting an RMF sub-reddit but it never took off! I have so many questions! But one in particular that…
Read More
Lon Berman
In Dr. RMF, FEDRamp, Risk Management Framework

Ask Dr. RMF

Dear Dr. RMF, Government IT Security staff work with systems owners to make sure that all systems in the agency have implemented the proper Risk Management Framework (RMF) controls. Organizations have deployed technologies like eMASS, XACTA, and RSA to manage the workflow and documentation for the RMF for their systems.…
Read More
Kathryn Daily
In Risk Management Framework, Uncategorized

Security Control Inheritance

By Lon J. Berman CISSP, RDRP CNSSI 4009 defines Security Control Inheritance as “a situation in which an information system or application receives protection from security controls (or portions of security controls) that are developed, implemented, and assessed, authorized, and monitored by entities other than those responsible for the system…
Read More
Kathryn Daily
In Risk Management Framework

The Results Are In!

A Quantitative Study on the Receipt of Formalized RMF Training and Perceptions of RMF Effectiveness, Sustainability, and Commitment in RMF Practitioners.    By P. Devon Schall, Ph.D., CISSP, RDRP   Over the past year, I have conducted research on the relationship between the receipt of formalized RMF training and perceptions…
Read More
Close Menu