Скачать или смотреть DoD Replaces RMF with Cybersecurity Risk Management Construct w/ Jason Dion ⁨@SimplyCyber⁩

Department of Defense announces cybersecurity risk management construct. This is big news for cyber practitioners and job seekers, whether you're in the government or the large commercial ecosystem that supports it. Even if your company is nowhere near the government supply chain, this is a helpful topic to get up to speed on because federal is the big leagues. It often sets the high watermark standard that commercial industry cyber programs aspire towards.

So here's what's replacing RMF for the Department of Defense: the Cybersecurity Risk Management Construct, CSRMC. I had tons of questions when I first saw this thing. For starters, what's going to happen with all these other agencies? Are they going to adopt CSRMC too, or does RMF stick around? What about all this guidance that I'm a big fan of in this wheel here of the RMF steps? This stuff is accessible, detailed, high quality. How does CSRMC impact its evolution?

Watching this transition is fascinating. I've got a boatload more questions. So I called the lifeline to help answer them. We are very lucky today to have someone who's lived and breathed RMF from every angle.

Catch the full conversation with Jason Dion and Steve McMichael at    / @simplycyber  .

#CyberSecurity #GRC #ISCM #CloudSecurity #NIST #ComplianceAutomation #AWS #SecurityControls #InfoSec #CyberComplianceRetry #CSRMC