Cybersecurity Compliance Risk Assessments: How to Conduct in 4 Steps

Shawn Elliott, Vice President, Federal Solutions In an organizational context, “being in compliance” refers to an organization conforming to the applicable standards and rules set by governing entities. These standards and rules can be both external (e.g. laws, industry standards, regulations) or internal (e.g. company policies). Failure to adhere to applicable standards can lead to […]

What is a POAM? (Plus a Free Template)

Art Clomera, CTO, Federal Services – Wouldn’t perfection be great?   Everyone, every organization, every system working exactly the way they should with inexhaustible, flawless precision from the word “Go.” Never worrying about something not going exactly as planned. It sounds pretty great but also pretty impossible… (even boring). Perfection in the world of cyber security […]

The 7 Risk Management Framework (RMF) Steps

Art Clomera, CTO, Federal Services – We’ve all heard the adage: “Nothing ventured, nothing gained.” In essence, you have to risk something if you want to get things done. So much of our lives involves assessing risk and intelligently managing those risks to meet our needs and achieve our goals. It’s why a motorcyclist wears […]

Cybersecurity Threats and How to Protect Your Government Agency

Shawn Elliott, Vice President, Federal Solutions Cyber threats have become mainstays in the modern news feed. Nearly every day we learn about the latest ingenious digital tool that maliciously exploits its victims to steal their information or money and disrupt legitimate activities. The frequency and severity of these threats are increasing. Cybersecurity sensors recorded approximately […]

What is Cybersecurity? (And Why It’s Important)

Art Clomera, CTO, Federal Services – It’s a simple question with a somewhat complicated answer – at a time when understanding its meaning couldn’t be more important. In a recent industry report, a series of digital trackers stationed across the globe logged more than 5.3 trillion – yes, “trillion” – cyber attacks worldwide in 2021. […]

Risk Management Framework (RMF): The Complete Guide for 2022

Art Clomera, CTO, Federal Services – Every organization has to manage risk in one form or another. Suppliers manage the risk of having too much or too little product in stock, legal risks are present in virtually every contract negotiation, and of course, insurance companies are built entirely on the principle of managing risk for […]

NIST 800-53: What is it and How is it used? (+Control families)

Art Clomera, CTO, Federal Services – Ensuring the security of information systems is a complex but necessary task that virtually every modern organization must undertake to some degree or another. One effective method of tackling information system security is to use the Risk Management Framework (RMF) developed by the National Institute of Standard and Technology […]

What is OSCAL? (And The Journey to RMF Automation)

Art Clomera, CTO, Federal Services – Developing software to support any federal agency’s mission is a multi-faceted task today.  Cyber threats, development complexity, and meeting operational mission requirements including security boundary continuous monitoring, is growing in complexity and resources.  Additionally, achieving  or maintaining an authorization to operation (ATO) remains a resource intensive task, burdened by […]

Is Zero Trust the Answer to the Federal Government’s Cybersecurity Woes?

Shawn Elliott, Vice President, Federal Solutions – We all know that cybersecurity is a top priority for all federal agencies. In Executive Order (EO) 14028, Improving the Nation’s Cybersecurity, the President initiated a sweeping government wide effort to ensure that baseline security practices are in place. A key component of this EO was to “develop […]