BAI Blog – Information Security I RMF Training

Kathryn Daily In BAI Announcements, Risk Management Framework, RMF Training

BAI Announces Security Control Assessment (SCA) Workshop

By Alice Steger, Director of Sales & Marketing Training Overview Security Controls Assessment Workshop provides a current and well-developed approach to evaluation and testing of security controls to prove they are functioning correctly in today's IT systems. This course shows you how to evaluate, examine, and test installed security controls…

Kathryn Daily In Risk Management Framework

RMF 30-Day Sprint

By P. Devon Schall, M.S., MA.Ed. CISSP, RDRP Over the past few months, I have heard rumblings of something called "RMF 30- Day Sprint". It came up initially during an RMF for DoD IT training I taught in Virginia Beach, and it was pitched as a new program to grant…

Kathryn Daily In NIST Privacy Framework

The Newest NIST Framework: The NIST Privacy Framework

By Kathryn Daily, CISSP, CAP, RDRP NIST has announced the development of a Privacy Framework. The framework is needed to ensure the ability to design, operate, or use technologies in ways that are observant of various privacy needs in a progressively connected and complicated environment. It is expected to help…

Kathryn Daily In Risk Management Framework

Is RMF Broken? Can it be fixed or is it beyond Repair?

By Lon J. Berman CISSP, RDRP Thanks to the work of the Joint Task Force, RMF is now the official information security life cycle process across all three "segments" of the Executive Branch, i.e., DoD, federal civil agencies, and the intelligence community. It's now been 4 ½ years since DoD…

Devon Schall In Risk Management Framework, RMF Training

RMF Applied to Modern Vehicles

By P. Devon Schall, CISSP, RDRP During a recent RMF literature search, I came across an interesting article titled “RMF Applied to Modern Vehicles”. The article was published by Charlie McCarthy and Kevin Harnett in 2014 and sponsored by the National Highway Traffic Safety Administration (NHTSA). The overall goal of…

Devon Schall In Risk Management Framework, RMF Training

Reflections from AFCEA Industry Days

By P. Devon Schall, M.S., MA.Ed. CISSP, RDRP On April 3rd and April 4th, I attended the Armed Forces Communications and Electronic Association (AFCEA) annual industry event titled AFCEA Belvoir Industry Days hosted at The Gaylord National Harbor in Maryland. The Belvoir chapter supports the Fort Belvoir community by connecting…

Devon Schall In Registered DoD RMF Practitioner (RDRP), Risk Management Framework, RMF Training

BAI Introduces: STIG 101 Training

By Lon J. Berman, CISSP, RDRP NIST 800-53, and specifically Security Control CM-6, requires an organization to Establish and document configuration settings for information technology products employed within the information system using that reflect the most restrictive mode consistent with operational requirements; Implement the configuration settings; Identify, document, and approve…

Devon Schall In Registered DoD RMF Practitioner (RDRP), Risk Management Framework, RMF Training

RMF and the Defense Security Service (DSS)

By Lon J. Berman, CISSP, RDRP The Defense Security Service (DSS) serves as an interface between the government and cleared industry. DSS administers and implements the National Industrial Security Program (NISP) by providing oversight and assistance to cleared contractor facilities to ensure the protection of classified information. In short, if…

Kathryn Daily In Risk Management Framework

Top Ten—Preparing for RMF Questions

By P. Devon Schall, CISSP, RDRP With the addition of Step 0 to the RMF life cycle (a preparation step that BAI has been preaching for years which is now being implemented in SP 800-37 Rev. 2), we decided to make this month’s top ten list based on preparation. Preparation…

Kathryn Daily In NIST 171

NIST 171—What’s That?

By Kathryn Daily, CISSP, RDRP If you heard a whooshing sound on New Year's Eve, that was probably the deadline for compliance with NIST 171 flying by. A lot of you might be asking “What is NIST 171?” NIST 171 is a set of requirements documented in the NIST Special…

Blog

BAI Announces Security Control Assessment (SCA) Workshop

RMF 30-Day Sprint

The Newest NIST Framework: The NIST Privacy Framework

Is RMF Broken? Can it be fixed or is it beyond Repair?

RMF Applied to Modern Vehicles

Reflections from AFCEA Industry Days

BAI Introduces: STIG 101 Training

RMF and the Defense Security Service (DSS)

Top Ten—Preparing for RMF Questions

NIST 171—What’s That?

Site Search

Recent Posts