Security Control Spotlight—STIGs and Controls

DIACAP Training, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach, Training in Washington DC

By Kathryn M. Farrish, CISSP at BAI Inc. One of the primary goals of the RMF life cycle is for a system to achieve and maintain compliance with a baseline of Security Controls in accordance with NIST SP 800-53 and CNSSI 1253. Security controls provide specific safeguards in numerous subject areas (aka. “families”), including access…

Building A Security Control Baseline “Step-by-Step”

Computer Network Training, Continuous Monitoring, Cybersecurity, Cybersecurity Framework, DIARMF, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

Article By Lon J. Berman, CISSP In the last issue of RMF Today and Tomorrow, we walked through the System Categorization process step-bystep. Now that we’ve categorized our system, let’s take a look at the steps for creating a Security Control Baseline. Step 1: Create Initial Control Set Your System Categorization defines the initial set of…

Top Ten—Questions for your Authorizing Official

DIACAP Training, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach, Training in Washington DC

By Annette Leonard The importance of the Authorizing Official (AO) in the RMF process is self evident. As the individual charged with signing your Authorization to Operate (ATO), the AO is obviously a key player. Ideally, the AO’s role is not limited to that final signature—he/she should be an active participant in the process from…

System Scans in eMASS … Think Before You Upload!

DIACAP Training, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach, Training in Washington DC

By Kathryn M. Farrish, CISSP eMASS, short for Enterprise Mission Assurance Support Service, is a comprehensive tool provided by DoD for managing the RMF life cycle. Among its well-known features and capabilities are generating security control baselines, managing RMF workflow, maintaining a repository of documentation artifacts, accepting system owner provided “self assessment” of security control…

You Geek? I Geek.

Just For Fun

When is the last time you sat down at your desk and really went full-geek on something just because you found it fascinating? No, not because you needed to know it for work or because you wanted to build up your skill set for some future position; I’m talking about full-on burial in a topic…