160 bits …SHAttered!!!

Cybersecurity, Security

We knew this day was coming. On a long enough timeline, the survival rate for every algorithm drops to zero. Yes, I’m paraphrasing Tyler Durden. It’s slightly less amazing than finding a unicorn in the woods and I don’t think many will remember where they were and what they were doing on the day they…

Building A Security Control Baseline “Step-by-Step”

Computer Network Training, Continuous Monitoring, Cybersecurity, Cybersecurity Framework, DIARMF, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

Article By Lon J. Berman, CISSP In the last issue of RMF Today and Tomorrow, we walked through the System Categorization process step-bystep. Now that we’ve categorized our system, let’s take a look at the steps for creating a Security Control Baseline. Step 1: Create Initial Control Set Your System Categorization defines the initial set of…

What is STIG Viewer (and why are there two answers)?

Continuous Monitoring, Cybersecurity, Cybersecurity Framework, DIARMF

By Kathryn M. Farrish, CISSP Security Technical Implementation Guides (STIGs) are published periodically by the Defense Information Systems Agency (DISA). STIGs contain very detailed lists of security settings for commonly used IT system components, such as operating systems, database management systems, web servers, network devices, etc. Compliance with applicable STIGs is one of the key…

The Top Ten STIGs

Continuous Monitoring, Cybersecurity, Cybersecurity Framework, DIACAP Training, DIARMF, Information Assurance, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

Article by Annette Leonard The Defense Information Systems Agency (DISA) is responsible for developing security guidance for configuring DoD information systems. An extensive collection of Security Technical Implementation Guides (STIGs) is published at http:// iase.disa.mil/stigs/Pages/index.aspx. STIGs contain detailed configuration guidance (settings) for commonly-used software products and other system components. Most of these documents are updated…

Security Control Spotlight: A Little Good News?

Continuous Monitoring, Cybersecurity, Cybersecurity Framework, DIACAP Training, DIARMF, Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

Article by Kathryn Farrish, CISSP Imagine this dialog between Edward, a System Owner, and Christine, his Information System Security Manager (ISSM): Edward (System Owner):“Now that we’ve completed our System Categorization, have you built the Security Control Baseline for our system?” Christine (ISSM): “Yes, sir, I have. Our system has been categorized as “Moderate -Moderate-Moderate (M-M-M)”.…

RMF’s System Categorization: Step by Step

Cybersecurity, Cybersecurity Framework, DIACAP Training, DIARMF, Risk Management Framework, RMF Training, Training, Training in Colorado Springs, Training in Virginia Beach, Training in Washington DC

In this blog post Lon Berman, CISSP talks about the sub-steps of the first RMF step, System Categorization. Step 1: Identify Information Types The first and perhaps most important step in the system categorization process is the determination of the “information types” that are stored and processed by the system. So what exactly is an…