Risk Management Framework

Zero trust

Thunderdome expansion, implementation plans among next steps in DoD’s zero trust journey

Randy Resnick is the director of Zero Trust Architecture Program Management Office in the DoD’s CIO’s office. A team of 17 to 18 people will analyze…

Read more
Amelia Brust/Federal News Network

DoD seeks better integration between cyber risks, operations

Read more
Getty Images/iStockphoto/NicoElNinoTelecommunication network above city, wireless mobile internet technology for smart grid or 5G LTE data connection, concept about IoT, global business, fintech, blockchain

DHS, DoD publish 5G security guidance to help agencies think through key ATO process

Read more
U.S. Navy/Rick Naystatt090310-D-5972N-009
SAN DIEGO, Calif. (March 10, 2009) Information Systems Technician 2nd Class Ryan Allshouse uses the intrusion detection system to monitor unclassified network activity from the automated data processing workspace aboard the aircraft carrier USS Ronald Reagan (CVN 76). IDS is part of the integrated shipboard network system and serves as an important computer network defense enabler protecting the unclassified shipboard network from cyber attack.  (U.S. Navy photo by Rick Naystatt/Released)

Navy plans to become ‘cyber ready’ by ditching compliance-obsessed ATO processes

Read more
(Getty Images/iStockphoto/peshkov)Global internet security concept with digital screen with lock icons in cells and pixel world map. 3D Rendering

DLA, civilian agency leaders explain what supply chain management means to them

Read more

Navy reforming its IT security processes to approve new systems in a day

Read more
FILE - In this Jan.23 2018 file photo, a French solider watches code lines on his computer at the French Defense ministry stand during the International Cybersecurity forum in Lille, northern France. Police in Europe and North America have seized servers and data from Islamic State propaganda outlets in a multi-country operation aimed at tracking down radicals and crimping the group's ability to spread its violent message. (AP Photo/Michel Spingler, File)

Army’s Project Sentinel aims to fix cyber authorization bottlenecks

Read more

VA must show sustained progress with cybersecurity for auditors to give their seal of approval

Read more

Closing the gaps between cyber risk assessment mechanisms

Why agencies need to consider both the Risk Management Framework and the Department of Defense’s Risk Assessment Methodology.

Read more
Woman touching a global network connection, Omni Channel and communications concept

Simplify, innovate, automate: NIST’s keys to IT modernization

NIST plans to soon update some of its publications, including its risk management framework, to reflect these priorities.

Read more

In upcoming pilot, Navy to test delivery of new IT capabilities to ships within 24 hours

The Navy will test a new architecture that relies on web services and shared IT infrastructure in a combination of ashore and afloat clouds.

Read more