The U.S DoD announced that it needs to test, reuse and reciprocate cybersecurity risk as required under the DoD’s adoption of the RMF, and DoDi…

← Back to Blog

The U.S DoD announced that it needs to test, reuse and reciprocate cybersecurity risk as required under the DoD’s adoption of the RMF, and DoDi 8510.01.

One wonders how the DoD and DIB will react to the testing of the RMF. The complexity of DoDi 8510.01; implementation of the risk management life cyber and associated control framework (CSF) and standards; and access to skilled and experienced cybersecurity risk management resources. Make testing, re-use and reciprocity a challenge. There is also DoDi 5000.90 to consider and the adoption of risk management within the procurement process.

In the past 2 months we have seen the DoD focus on the adoption of the CSF in DIB cyber strategy, and now a focus on maintaining compliance to the RMF. Where is the DoD going with cybersecurity risk management. the DoD has all the tools necessary to manage cyber risk, one suspects its not implemented them fully.

@Thaddeus Dziekanowski Bob Dix

Veritas GRC

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7194231077127770112