RMF Background

Managing the security of DoD data and IT systems has evolved since the DoD launched its first information security accreditation process in 1992. In this video, Linda Gross explains how the DoD adapted its risk management approach to address new technologies and threats and need for standardized security controls. Linda also describes the laws, organizations and publications that resulted in the DoD transition to the Risk Management Framework (RMF) process in 2014.