The Risk Management Framework (RMF) is a template and guideline organizations use to identify, eliminate and minimize risks. It was originally developed by the National Institute of Standards and ...
Adam Stone writes on technology trends from Annapolis, Md., with a focus on government IT, military and first-responder technologies. The Pentagon plans to change the way it addresses cybersecurity ...
The Army is launching Project Sentinel to adapt the current Risk Management Framework (RMF) process into a streamlined threat-informed risk decision process. The Army adopted the Risk Management ...
The 2026 Black Kite Third-Party Breach Report found that for every vendor breached, an average of 5.28 downstream organizations were compromised, the highest cascading impact on record, with a 117-day ...
The authors of the new Cyber Risk Management Program framework explain how it can set an organization up to better comply with SEC and other disclosure and reporting regulations. In a landmark ...
NIST provides a stockpile of resources aimed at helping CISOs and security managers safeguard their technologies. Among them, the NIST Cybersecurity Framework and NIST Artificial Intelligence Risk ...
After months of vowing to “blow up” the Risk Management Framework (RMF), Katie Arrington, the Pentagon’s acting chief information officer (CIO), announced today that her office will release a revamped ...
The Defense Department’s Office of the Chief Information Officer has officially kicked off its effort to improve how the Pentagon manages cybersecurity risks with advanced automation and continuous ...
The Department of Defense (DoD) is looking for input from industry on its plans to “blow up” the agency’s Risk Management Framework (RMF) while switching to a real-time cybersecurity posture. The RMF ...
In a move aimed at streamlining cybersecurity practices within the Department of Defense (DoD), Chief Information Officer John Sherman announced the issuance of a new memorandum during his keynote ...
Cybersecurity risk management identifies data and network risks and how to defend against them. Learn best practices for ...