For those that haven’t heard GSA has been quickly pushing the Federal Risk and Authorization Management Program (FedRAMP) out the door with the goal of accrediting common cloud-based solutions that agencies can develop on top of. In this post from The Guerilla CISO, Mike “@rybolov” Smith takes on FedRAMP discussing the pros, cons, and...
Read more »
Jack over on his blog put together this nice follow-up post based on the NoVA Hackers Association meeting on Monday. /// “Yes, you read that correctly. Until yesterday, I wasn’t very interested in barcode scanning software. Until @rybolov gave a short demo on barcodes and brought to my attention the fact that you can...
Read more »
Bored over the holidays and looking for something to do? You an infosec professional that lives or works in NoVA, DC, and MD? Got a topic you want to talk about but no where to post it? Don’t have time to maintain a full time blog? Well then we have the answer for you! NovaInfosecPortal.com regularly...
Read more »
Every once in a while an opportunity presents itself to affect some real change in federal information security practice. Now is such a time. A slew of new NIST documents are being released between now and April. These are the core NIST documents that describe how to satisfy FISMA. They include NIST SPs 800-30 Revision...
Read more »
