My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk…

← Back to Blog

My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk before an ATO is issued. (https://lnkd.in/e4nHdRwS)

That would imply that a PO has the scope to assess the risk of software vulnerabilities before they issue an ATO. Requiring software vulnerability management as part of the on-going risk assessment process under the RMF.

Ted Dziekanowski Brian McCarthy Jason Spezzano

#theaugustgroup #dodi851001 #fodi500090 #dod #cyberriskmanagement #cybersecurity

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6966711738511593472