Staying NISPOM compliant has always been difficult – but when SEAD 3 went into effect in 2017, the standard for security became more than just compliance. Now, organizations must play an active role in monitoring themselves, their employees, colleagues, and associates. […]
How Portal Commander is Readying Organizations for the Future of Compliance Read More »
In accordance with Executive Order 12829, the Defense Security Service (DSS) administers and implements the defense portion of the National Industrial Security Program (NISP). To this end, it publishes the DSS Assessment and Authorization Process Manual (DAAPM) providing a comprehensive
DSS Risk Assessment: Terminology Defined and Steps Explained Read More »
By October 1st of 2019, the Office of Personnel Management (OPM) will be dissolved with its various functions transferring to other U.S agencies, thanks to an executive order signed by the President in April. While some have found the move perplexing (“out
NBIB to Merge with DoD – Will the Security Backlog Finally Disappear? Read More »
In many ways, the worst thing that can happen for cybersecurity in the public sector is an interruption of operations. During the 35 day shutdown of the U.S government which occurred between December 22, 2018 and January 25th of this year, massive furloughs left
How Automation Can Keep Cybersecurity Alive During a Shutdown Read More »
The National Industrial Security Program Operating Manual (NISPOM) defines security standards that must be followed by U.S organizations (government and corporate) with access to classified information. Among other things, the NISPOM provides guidelines to: • Ensure proper clearance for access
Seamless NISPOM Compliance with Access Commander and Deltek Products Read More »
In July of 1982, a British man named Michael Fagan climbed a drainpipe in London, broke into Buckingham Palace, and triggered several alarms on the premises. Readers might imagine that he was quickly spotted and apprehended by the Queen’s Guard;
Why Facility Breaches Happen, and How to Prevent Them Read More »
As 2018 draws to a close, it’s a good time to reflect on cybersecurity compliance. This year has seen a rise in mobile threats, ransomware, data breaches, and increased focus on the energy sector, which has been the target of foreign attacks. Thankfully it’s
The Future of FISMA and Security Standardization in the U.S. Read More »
Background When Amazon Web Services was proposed in 2003 by Benjamin Black, it had already been a year since the U.S Government completed its effort to create and finalize the Federal Information Security Management Act (FISMA) – which defined IT security across public agencies
Enterprise Security Management in the Cloud Read More »
In 2017 the Director of National Intelligence (ODNI), acting in its capacity as the Security Executive Agent (SecEA), announced a third revision to the Security Executive Agent Directive (SEAD), now known as SEAD 3. Although announced last year, some agencies have only
SEAD 3 and Travel-Reporting Requirements for Cleared Personnel Read More »
In the past decade, it has become clear that the U.S security clearance process is in a state of crisis. Security clearances are required by all federal employees or employees of cleared contractors with access to classified information – those
9 Tips for Improving the Clearance Process Read More »
