RMF Documents and Resources

DIACAP Training, DIARMF, Information Assurance, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

For your convenience, ITdojo has assembled the following collection of RMF-related government publications. Please note these are UNCLASSIFIED documents with no restrictions on usage or distribution. Laws and Executive Branch Policies Federal Information Security Management Act (FISMA)  OMB Circular A-130 Appendix III (Security of Federal Information Systems)  Federal Information Processing Standard (FIPS) Publications FIPS 199…

Top Ten—What’s “new” in RMF for DoD IT?

DIACAP Training, DIARMF, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

By Lon J. Berman, CISSP BAI Consulting Now that DoD has “officially” begun its adoption of RMF, let’s take a look at some of the things that are “new”! 10. Cybersecurity. The word “Cybersecurity” has been part of the government IT security discussion for several years, going back to a Presidential Directive in 2008. DoD has now adopted the term Cybersecurity in…

DoD Transition to RMF Imminent—Will You Be Ready?

DIACAP Training, DIARMF, DoD 8570 Compliance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training

By Lon J. Berman, CISSP For quite some time, it’s been well known that DoD would be making a transition from the legacy DIACAP Certification and Accreditation (C&A) Program to the Risk Management Framework (RMF). This transition is part of a broader effort to bring all Executive Branch departments and agencies … including DoD, the intelligence community and all “civil” departments/agencies … into a…