An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate€¦

← Back to Blog

An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate DoD data security. With all the cybersecurity and information security regulations and programs Federal agencies and the DoD are to comply. Ranging from FISMA (2002 and 2014), assessment against DFARS 252.205-7012, DoDi 8510.01 and 5000.90. Requiring the implementation of the RMF and cybersecurity standards that set out least privilege access controls amongst many others.

Interestingly CISA published the OMB guidance for implementing the requirements outlined in OMB Memorandum M-23-03, in February this year. Requiring IGs to input their FY 2023 FISMA metrics into the CyberScope reporting tool by July 31, 2023. One wonders if this applies to the DoD IG?
(https://lnkd.in/ehHF-j87.)

Ted Dziekanowski

#fisma #rmf #dfars #accessmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7057272454083170304