Practical writing on DoD compliance, RMF, STIG management, and government software development, from the team that builds this stuff for a living.
RMF & Compliance
A practical guide to automating Plans of Action and Milestones in DoD RMF programs, what manual POA&M management costs you, what automation actually looks like, and what to look for in a compliance tool.
Read Article →STIG Compliance
A practical look at STIG Viewer, SCC, and OpenSCAP, what each one actually does, where each one stops, and what you still need to manage RMF compliance across a real program.
Read Article →RMF & Compliance
Open source compliance tools are free to download but not free to operate. What DoD programs actually spend when they build their RMF workflow around open source software, and the honest question you should be asking before you go that route.
Read Article →