New risk management framework expected to improve DoD cybersecurity

Federal News Radio: The Defense Department is transitioning to a new approach to authorize its IT systems. The Risk Management Framework (RMF) will replace the DoD Information Assurance Certification and Accreditation Process (DIACAP).

This new approach should let owners, operators and defenders of IT systems better understand and manage the risks posed by threats and vulnerabilities to DoD networks and data.

While managing risk is more difficult than checklist compliance with cybersecurity regulations, officials said it produces better results.

Read article

Share