Dear Dr. RMF – New AO

“New AO, new game?” writes: We just found out our Authorizing Official will be retiring next month and there is still no word on who his replacement will be. What sort of problems can we anticipate when a new AO takes over the reins? How much flexibility will he/she have…

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF – Informed

“Just want to be informed” writes: As a consultant, I try very hard to keep up with all the RMF publications so I can best serve my clients. On the NIST website I found a mailing list you can subscribe to. I signed up and now I receive regular e-mails…

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF

“Identity Crisis” writes: I am a contractor working on development of a system that is jointly owned by a DoD agency and a federal civil agency (Dept. of Treasury). My company is expected to do most of the “heavy lifting” to develop the RMF package for this system and we…

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF

“Overlay Layover” asks: I’m a little bit confused about how to find available security controls overlays. According to the RMF policy (DoD Instruction 8510.01) and the RMF Knowledge Service, approved overlays can be found on the CNSS.GOV website. Well, I keep looking there and all I see are the same…

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF

“In Search of Perfection” writes: One of my customers was told by their Security Control Assessor (SCA) that they could not get Authorization To Operate (ATO) unless their POA&M had zero open items; in other words, they are expected to be 100% compliant with all the controls in their baseline….

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF

Dear Dr. RMF, Meredith writes: Hi Dr. RMF! We are working on the RMF package in eMASS for a new system and there is a check box labeled “National Security System”. We’re not sure whether to check this box or not. One of my colleagues thinks we should check the…

Continue Reading

Post Categories: Dr. RMF Tags:

Dear Dr. RMF

Dear Dr. RMF, “Assessed” writes: Please help me better understand RMF Assess Only. Some of my colleagues are saying we should consider pursuing an Assess Only ATO because it’s so much easier than going through the full ATO process. Is that even for real? Dr. RMF responds: RMF Assess Only…

Continue Reading

Post Categories: Dr. RMF Tags:
SUMMER PROMO! Register for two 4 or 5 day classes and take our newest class - RMF Project Management Advantage https://rmf.org/rmf-project-management-advantage/ for free!
Email info@rmf.org for more details! (Promo valid through Sept 30)
Register Now