Articles
The DoD RMF process, step by step: what it takes to earn an ATO
The seven steps of the DoD Risk Management Framework, the eMASS artifacts each one produces, and the four places ATO packages most often stall.
· 7 min read
Insights
Articles, white papers and perspectives from 30 years inside DoD information assurance.
Articles
The seven steps of the DoD Risk Management Framework, the eMASS artifacts each one produces, and the four places ATO packages most often stall.
· 7 min read
Articles
DoD suspended CMMC Phase 2 third-party assessments in July 2026. NIST SP 800-171, SPRS scores and annual affirmations still apply. Here is what to do now.
· 6 min read
White papers
A white paper on continuous monitoring as an operating rhythm: scan cadence, STIG drift, POA&M burn-down, change control and ongoing authorization.
· 12 min read
Perspectives
Programs that staff the ISSO seat as a documentation clerk pay for it at assessment time. A perspective on why that seat needs senior judgment.
· 4 min read
Subscribe with the RSS feed.
Request a capability statement for teaming, subcontracting or a direct award.
Request a capability statement