RMF Documents and Resources

DIACAP Training, DIARMF, Information Assurance, Risk Management Framework, RMF Training, Training, Training in Virginia Beach

For your convenience, ITdojo has assembled the following collection of RMF-related government publications. Please note these are UNCLASSIFIED documents with no restrictions on usage or distribution. Laws and Executive Branch Policies Federal Information Security Management Act (FISMA)  OMB Circular A-130 Appendix III (Security of Federal Information Systems)  Federal Information Processing Standard (FIPS) Publications FIPS 199…

Continuous Monitoring—It’s Not (Just) About The Tools

DIACAP Training, DoD 8570 Compliance, Information Assurance, IT Courses in Hampton Roads, IT Training In Norfolk, Risk Management Framework, RMF Training

by Annette Leonard BAI Consulting Continuous Monitoring has long been recognized as a critical element in maintaining a strong security posture for any IT system.  In spite of this, the risk management processes used in most federal agencies have traditionally been centered around mountains of paperwork, along with “point-in-time” assessments and approvals.  With the ascension…

DIACAP Says “So Long”

CISSP, DIACAP Training, DoD 8570 Compliance, Information Assurance, Risk Management Framework, RMF Training, Security, Training, Training in Virginia Beach

On March 12, 2014 the DoD released a new policy that makes it official that the DoD Information Assurance Certification and Accreditation Process (DIACAP) is being put to bed in favor of a “new” Risk Management Framework (RMF).  The news is not a revelation as it has been in the works for a few years…