Tag Archives: dod
SRR Findings to IA Controls
From Reader: I stumbled upon your site and am new to security working for a contractor. I’m attempting to complete a DIACAP POA&M and need to map SRR findings to IA controls – any idea where I might find this … Continue reading
DIACAP Essentials + IA Control Validation Training (part 4): DIACAP/AFCAP Day3
Day 3 heats up a little. We start talking about what it take to actually get validated. The DIACAP Implementers Guide & the DIACAP Validators guide is opened up and reviewed. I think we all learned a little something during … Continue reading
DIACAP Essentials + IA Control Validation Training (part 2): DIACAP/AFCAP Day1
DIACAP/AFCAP Day 1. This is the second installment of the DIACAP Essentials journal. In the first day of class we’ve taken a high level look at the big picture of the Department of Defense Information Assurance Certification & Accreditation Process … Continue reading
Kyu H. Chay
To the family of Kyu H. Chay, I am sorry for your loss, but I thank you for your sacrifice. Kyu H. Chay is more that just an American hero, he represents the best of what we are capable of. … Continue reading
Certification & Accreditation Change
Standard-issue security Certification and accreditation process for national security systems to extend to the rest of government. A two-year-old effort to standardize processes for certifying and accrediting government IT systems could soon bear fruit, according to officials from several agencies. … Continue reading
Operational Activity to Systems Function Traceability Matrix (SV-5)
Product Definition. Operational Activity to Systems Function Traceability Matrix is a specification of the relationships between the set of operational activities applicable to an architecture and the set of system functions applicable to that architecture. Product Purpose. SV-5 depicts the … Continue reading
Systems Functionality Description (SV-4)
Product Definition. The Systems Functionality Description documents system functional hierarchies and system functions, and the system data flows between them. Although there is a correlation between Operational Activity Model (OV-5) or business-process hierarchies and the system functional hierarchy of SV-4, … Continue reading
DIACAP Activity #1 Initiate and Plan Certification & Accreditation
Initiating the Department of Defense Information Assurance Certification & Accreditation Process (DIACAP) starts with a lot of “setting up shop”. Registering with a DoD component, forming the IA Team and assigning IA controls (also known as IA requirements and security … Continue reading
