Skip to main content
Skip to primary sidebar

Cyber Security Compliance and IT Jobs

Cyber Security Training
about me.
Information Assurance Jobs

Advice for a Security Control Assessor SCA

December 6, 2021 by Bruce Brown Leave a Comment

Filed Under: Risk Management For DoD IT Tagged With: Advice for a Security Control Assessor SCA

Reader Interactions

Leave a Reply Cancel reply

You must be logged in to post a comment.

Social connect:

Primary Sidebar

search

Search this website

This book is an overview of how the NIST SP 800-37 risk management framework works from the perspective of an information system security officer (ISSO).

also available on Amazon!

NIST RMF 800-37 templates — Free 800-37 templates

The NIST 800 Template download contains a .doc file template and xls templates for POAMs, Federal, State, cloud based and a legacy template as well as resources where you can find more on NIST 800-37 documents for your use.

Learn to Make 6 Figures in CyberSecurity

Cyber Security How to make up to 6 Figures — 6 figures in Cyber Security

This course explains how I have been able to consistently make 6 figures doing cyber security. There is a method that I have used during my development in cyber security. I am presenting that method to you.

Teleworking - IT Remote Work — Teleworking – IT Remote Work

Teleworking is something I have been doing for the last 5 years. This is how I did it.

Find Teleworking IT Jobs

View Course

RMF ISSO Foundations Training

RMF ISSO Foundations

I was an Information System Security Officer (ISSO) doing Risk Management Framework (NIST SP 800-37) for over a decade. I am a Cybersecurity veteran and I can explain (in plain English) what you DO in the Risk Management Framework process as an ISSO.

NIST SP 800-37 Presentation

login

Register
Log in
Entries feed
Comments feed
WordPress.org

Recent Posts

cybersecurity is not always fun.
starting as a system admin before #grc
The ever-green field of security compliance
45 PERCENT OFF BlackFriday2023x Convocourses
from help desk to #cybersecurity

Meta

Register
Log in
Entries feed
Comments feed
WordPress.org

Recent Comments

	http://Www.Finance.I… on SRG/STIG Applicability Guide a…
	Elsa7 on ConvoCourses podcast: Cyber Se…
	Tony on STIG Update – DISA has r…
	horloge on SCAP Compliance Checker SCC)
	218 Information assu… on Information Assurance Vulnerab…

Tags

#rockwellcollins #securitycompliance in 60 seconds IT to Compliance 4th industrial revolution 6 figures 9to9 Software Solutions 20th century fox linux admin 22nd Century Technologies Inc 800-37 800-39 800-53 800-137 2008 2012 3750 StackWise 3850 8140 8500 8500.01 8500.1 8510 8570 31000 @riskmanagement A&A ACAS ACASS access Account Security Manager accreditation acrobat act Active Directory activity Adam Sedgewick Adapter development tool etc ADC Administrative assistant Administrative Job Administrative Job to Cybersecurity and IT job adobe Adobe Acrobat Pro DC Classic advanced persistent threats Advice for a Security Control Assessor SCA AECOM AF afb AFI33-2 AIAP Air Force airforce information assuarance airforce information assurance AISO Akamai Kona Site Defender (KSD) analyst and administering Cisco ASR routers and resolution of Security Incidents andrew yang Android Android.Trojan.Uupay.D trojan and the Peace Corps and the Risk Management Framework (RMF) anti-virus AntiVirus apple appliances application delivery controller apply april 2019 APT ArcSight Arc Sight arizona Army Army and Air Force army information assurance Army National Guard (ARNG) ARNG asking ASP assess assessment Assessment Authorization assessments assessor documents 53a association of risk management assurance technology AT atlanta ATO at risk management ATS authorization authorization package authorize automotive Avamar Awareness Program awareness training backbone bad grammar bcp Become a better ISSO and cybersecurity analyst Q&A BEMS benchmark BIA BIND Blackberry Blackberry BES BlackBerry Enterprise Mobility Server (BEMS) blackberry uem black man in IT BMC border Router/Switches Bored in Compliance Changing Career Paths Boston Area boulder brocade brooklyn bts bug building of ADT buisiness continuity business impact assessment business risk bwi C# c&a california Can a teacher or Nurse get into IT c and a CAP CAP certification career career fair careerjet cary casp categorization cc CCDP ccent cci ccie CCM ccna CCNA-Security CCNE ccnp CCNP Security CCSP CDC Cedar Rapids CEH center Center for Information Technology Center for Internet Security (CIS) centos certi certifcation and accreditation certification Certification & Accreditation Certification and Accreditation Certification for Security Control Assessor Q&A Certified Ethical Hacker Certs and Skills and Make More Money in IT chatanooga CHATTANOOGA checkpoint check point checkpoint firewall chinese chrome CISA Cisco Cisco ASA Cisco ASA VPNs Cisco Nexus products Cisco switches CISM cism certification CISSP CISSP-ISSEP CIT citrix Civil Servant GS Civil Servant GS vs Contracting Civilian in IT CJCSI 6510.01 clearance Clearance Career ClearCase Cleared Jobs cloud cloud computing Cloud Security for IaaS/PaaS/SaaS cloud vs cybersecurity clustering CMaaS CMD cmdb CMRS cnd CNOSS CNSS CO COBITS coldfusion cold site collection college college student colorado colorado springs Columbia Common Criteria Community College compliance comptia computer fix computer network defense computer science configuration configuration manager configuring contingency plan continuity plan Continuous Diagnostics and Mitigation Continuous Monitoring Continuous Monitoring as a Service Continuous Monitoring in the Course continuous monitoring risk scoring Contracting Civilian in IT control families and implementing controls controls convocoures ConvoCourse Community convocourses Convocourses contacts CISSP study Q&A Convocourses ISSO testimonial ConvoCourses podcast convocoursespodcast ConvoCourses podcast: control families and implementing controls ConvoCourses podcast: ConvoCourse Community ConvoCourses podcast: Cyber Security day to day activity ConvoCourses podcast: Cyber Security Therapy Sessions ConvoCourses Podcast: POA&M Risk responses Resumes ConvoCourses podcast: privacy protection overview resume review Convocourses podcast: RMF Course Updates New NIST 53 Convocourses pofcast convocourses update COOP core data center coronavirus corporate risk COTS covid-19 CPE CPEs on ConvoCourses csc CSIH CSO Online CSP CSRA CVE cyber cyber engineer cybersecurity cyber security cybersecurity analysis cybersecurity analyst CYBER SECURITY ANALYST Job Listing at Kelly Services Cybersecurity Analyst vs Engineering Daily Tasks Cybersecurity Analyst vs Engineering Daily Tasks q&a Cybersecurity and IT job Cybersecurity and IT Resume Marketing (Part 1) cybersecurity compliance cyber security day cybersecurity degree cyber security engineer Cybersecurity Engineer IDS/IPS Specialist Cybersecurity engineer job cyber security experience cybersecurity framework cybersecurity interview Cybersecurity Job Cybersecurity Public Cybersecurity Public or Private Sector cybersecurityresume Cybersecurity Resume Cybersecurity Resume Tips for Security jobs (part 3) Cybersecurity Risk Management Cybersecurity Risk Management Best Practice Working Group cybersecurity risk management job cybersecurity salary Cybersecurity specialist Patuxent Cybersecurity Study in 2021 blockchain and threat intel Cybersecurity with little or no Experience Cybersecurity with ZERO experience Cybersecurity workforce Cybersecurity Workforce Framework cyberspace workforce cyber threat Cyber Threat Analyst in NEWARK cyberwork cyber workforce cyberworkforce Dahlgren DameWare DATA DATA/INFORMATION ARCHITECT in COLUMBIA database databse Data Domain Data Loss Prevention and premise-based SMTP relays datapower data protection Data Protection Advisor data security dayton DB2 DC3 DCO DCP dcs-7000 Defense defense information systems agency Defense Languages Institute Defense Logistics Agency (DLA) Delaware denver Denver Colorado denver security Department of Aging & Disability Services Department of the Navy Depend on Stakeholders during Risk Management Framework Design DHCP DHS DIACAP DIACAP compliance engineer DIACAP transition to RMF diacap vs rmf DIARMF DIARMF - Continuous Monitoring diarmf - implement diarmf-select DIARMF A&A DIARMF A&A - Assessment Authorization diarmf assess diarmf assess and authorizaiton diarmf authorization diarmf diacap DIARMF Documentation & Implementation diarmf implentation diarmf news DIARMF Process diarmfs diarmf select disa disaster recovery DISA STIG disa stigs discord ditcap DITSCAP ditscap supersedes diacap DLA DLI DMZ dns dod dod 8140 dod 8530 dod 8570 dod 8570 chart DoD Annex for NIAP Protection Profiles DoD Annex for NIAP Protection Profiles For Mobile Devices dodd 8140 dodd 8140 cyberspace workforce DoDI 8140-01 DoDI 8500 and 8510 DIARMF signed DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT) DoDI 8530.01 dod information assurance awareness dod information assurance awareness training DOD RHEL dod risk management DoD RMF for IT dod security clearance Does Cybersecurity Job require a Security Clearance DOI Do I teach Security Control Assessor (SCA) activity? domain name system DoS do you need to do the polygraph test for and sci #securityclearance dr Draft Backbone Transport Services (BTS) DSS DTC during staycation EAL Earn CEUs Earn CEUs & CPEs on ConvoCourses EDB Postgres Advanced Server 9 On Red Hat Enterprise Linux STIG Version Education EEM Elasticsearch el capitan Electrical emass emass training EMC VNX employer Employer Asking for Too Much Experience encryption Endpoint endpoints engineer Engineering Daily Tasks engineer job ENS Enterprise Mission Assurance Support Service Enterprise Mission Assurance Support Service (eMASS) enterprise risk enterprise risk management (ERM) enterprise security risk manager entry level information assurance jobs EOS/EOL EPA EPMO EPMO Project Analyst epo EPSD ESM Essential Security est ESX ESXi ETS ETS csc cyber engineer NJ evaluate risk evaluation of risk event Excel exchange Executive Summaries Executive Summary experience expo expos f5 facebook failed the ISC2 CAP false negative False positive False positive versus false negative family Interpretation farmington hills FBI FCC federal fedramp fedramp 3pao finding out Finding Out Cybersecurity Salary Finite Element Modeling fips 199 firewall firewall and proxy rules firewalls FISMA fisma 2012 fisma 2014 fisma requirements fix the fan of toshiba Satellite P755 S5380 FMC fmr forescout forescout-counteract format cybersecurity FOSS foster framework Ft. Belvoir ga GaDHS - Information Security GC GC-EAD GCIA GCIH G Data gilead sciences got a job GOTS Governor’s Office of Information Technology GPO GPOs grc Greenwood Village group policy management. Group Policy Objects Group Policy Objects (GPOs) GSEC gslc gslc certification guardium GXP hacker methods Hardware HBSS HBSS (Host Based Security System) help desk helpdesk helpdesk specialist help desk support Help Desk Support I Herndon HHS HIAM HIAR highland ranch HIPAA hippa HIPS HIPSDetection History of C&A honda HOR hot site How do I get a security clearance if I am eligible How long does it take to get to 6 figures how to find a job How to study for IT certifications HQ Hyena IA IA controls IACP ia jobs IAM IAO iase IASO IASO and ISSM IAT IAT Level IA training IAVA IAVM ibm IBS ICS ICS security idam identification of risk Identity and Access Management IDS I Failed the ISC2 CAP certification IISO NIST Immediate Hire Position as Security Analyst in Columbia SC with State of SC implemenation implement implementation Implementation of security controls resources part 1 Implementation of security controls resources part 2 implimentation Industrial Control Systems Industrial Control Systems Security info assurance info assure infoblox informaiton assurance information INFORMATION ARCHITECT information assurance information assurance air force information assurance analyst information assurance army Information Assurance Awareness information assurance awareness certificate information assurance controls information assurance degree information assurance degree online information assurance degree program information assurance engineer information assurance jobs Information Assurance Lead information assurance manager information assurance officer information assurance service information assurance services information assurance technology information assurance training Information Assurance Vulnerability Alert Information Assurance Vulnerability Management information awareness training army information protection information security Information Security Certification and Accreditation (C&A) specialist Information security continuous monitoring Information security officer information security specialist INFORMATION SECURITY SR - LEVEL SR information system information system security architectural information system security engineer information system security officer Information Systems Security Managers (ISSMs) information technology information technology risk management information technology risk management certifications infosec Internet domain records interpret security control Intrusion Prevention ios ios9 ios11 IOS XE IPS I recommend Program Management IRS ISACA isaca risk it framework ISC2 ISC2 CAP ISC2 CAP Recommended Resources ISCM ISCP isdi isds isim ISO ISO 27001 ISO 27002 ISO 31000 2009 Risk Management iss8.5 ISSA ISSE ISSEP ISSM ISSO ISSO and cybersecurity analyst isso jobs ISSO must Support the Team ISSO NIST Security Control Family Interpretation ISSO RMF Foundations course overview ISSOs Cybersecurity Certifications ISSOs Cybersecurity Certifications and DoD 8140 ISSO vs ISSE ISSO vs ISSE Differences Q&A Is there racism for black men in information technology IT IT/ITES IT Admin IT career IT Certifications IT degree IT Experience by Asking and Volunteering ITIL IT Infrastructure Library IT job it jobs itjobs IT jobs for beginners it jobs in the usa it jobs in usa IT market IT Marketing IT Office IT OPERATIONS ENGR - COMPUTE IT program manager resume + executive summary IT programs IT Q and A IT related business risk It resume IT Resume Marketing IT Risk Analyst IT Risk Management it security IT Security Jobs IT Services Organization and Offering ITSG ITSG-33 IT six figures IT study IT volunteering IT work J-messages J2EE java JIE jncia job job fair job in usa job option jobs jobs in america jobs in the usa jobs in usa Joint Information Environment jre JREAP Juniper JVAP JWAC K-messages kelly services knowledge service knox labwork LAN Layer 3/ Application/Micro-Segmentation Firewall Policy/Administration LDAP LDAP (Active Directory) LG Android Link-16 linkedin Linux Linux or VxWorks listing Listing Lab work on Cybersecurity Resume littleton Load Balancer load balancers Load balancing location online Log/Monitoring correlation and/or Data Packet Inspection Loggers logrhythm logs MA MAC Mac/OS MacAfee macintosh mainframe maintenance major dns severe google redhat malware management risk wiki Managing stress in Cybersecurity Marine Corps maryland masters degree Masters Degree in a Cybersecurity Role matrix Maverick Mavericks mcafee McAfee Endpoint Security McAfee ePO MCSE MCTP md Mechanical Message Queues microsoft Microsoft SMS/ SCCM microsoft sql middle class military miller jones Milwaukee Minnesota Department of Health mission system engineer mitigation MN mobile devices mobility modernization monitoring Monterey MPLS ms MS-Windows MS Excel MS Power Point MS SQL MS SQL databases MS Visio My experience going through TS clearance my opinion about masters degree in IT NAS National Initiative for Cybersecurity Education National Initiative for Cyberspace Education national security national security agency Naval Hospital Jacksonville Naval Research Laboratory Navy NC Nederland Need Information Security Admin in Cedar rapids IA nessus Nessus Scan netapp Netapps NETCOM netscreen network Network access control network administration Network Administrator Network Administrator in Oak ridge TN Network Area Storage Network attached storage network engineer Network Engineer II Network Engineer In Monterey CA Network Engineer to Risk Management Framework Networker network job Network Operations and Security Center (INOSC) network security network security engineer Network Security Engineer Woodbridge network technician new hampshire new jersey nexpose Nexus 7000 nh NIAP CCEV NICCS NICE niehs NIH nipernet NIPR NIPRENET niprnet nist nist 800 NIST 800 37 Revision 2 NIST 800 and Privacy nist 800-18 NIST 800-30 NIST 800-37 NIST 800-53 NIST 800-115 NIST80037 NIST Cybersecurity Framework nist risk nist risk management framework nist risk management framework 800-37 nist risk management framework 800-37 rev1 NIST Risk Management Framework 800-39 NIST RMF NIST RMF 800 NIST RMF Security Control Interpretation NIST security awareness training NIST Security Framework NIST SP 800-30 nist sp 800-37 nist sp 800-53 nist sp 800-60 NIST SP 800-115 nist sp 800-137 nist stigs NJ noc north carolina Northrop Grumman NSA NVD NXOS NYC Office of Information Technology oftware-Defined Networking (SDN) ohio OIT oobm operational risk operational security operation risk operation technician Oracle Oracle Linux Oracle Linux 5 Oracle Linux 5 STIG V1R1 orange book Oregon or GCFA or Red Hat Enterprise Linux Server 6 os 8 osi osx Outlook OVPI Pa page Palo-Alto palo alto palo alto network patch PCB PCI PCI DSS personnel security php Physical and Environmental Protection physical risk physical security PKI plan of action and milestone PMI Risk Management Professional PMO pmp POA&M or CAP POA&M Risk POAM POAM dates POAM vs Implementation Statement podcast Politics Politics in the IT Office PowerPoint PowerShell pp princeton privacy Privacy do not put real name and location online privacy protection overview private sector privilege access program management Program Manager Project Manager protection of information in IT protection profile python q&a Qos QRadar ArcSight rainbow series Raleigh Raytheon Software Engineer Tucson AZ RDIT recommend RecoverPoint redhat red hat Regional Transportation District (RTD) relocate Remedy remote remote jobs Remote Jobs without a clearance Remote Work Remote Work Cyber security Architect require Research Triangle Park responsibility resume Resume bad grammar and format cybersecurity resume cyber security Resume Cybersecurity Specialist Review Resume ISSO review resume review Retina review Revision 5 Security Controls for Information Systems and Organizations rims risk risk analyst risk assessment risk assessment methods risk assessment model risk assessment reports risk assessment table risk assessment worksheet Risk certification risk determination risk evaluation risk id risk identification risk impact risk it analyst risk it framework risk management risk management analyst risk management association risk management chart risk management definition Risk Management For DoD IT risk management framework Risk Management Framework (RMF) Risk Management Framework (RMF) for DoD Information Technology (IT) risk management frameworkd Risk Management Framework For DoD IT Risk Management Framework for Information Systems and Organizations A System risk management framework ppt risk management framework steps risk management guide risk management magazine risk management principles risk management register risk management techniques risk management wiki risk management worksheet risk managemnet framework risk managemnt risk manager risk manager job description risk managment risk managment frame risk managment framework risk managment frame work risk mangement risk mangement framework risk mitigation risk operational risk register template risk types rismangement framework riverbed Riverbed SteelHead CX rmf rmf assessment RMF course rmf for dod it rmf implementation RMF ISSO Foundation course RMF ISSO Security Controls Docs Updates rmf job rmf jobs RMF Knowledge Service RMFKS RMF Lesson Learned rmf security controls RMF Training Paths RMF Training Video Presentation roles router RPM YUM RSA NetWitness SA&A Saint Paul Salem SAM samsung samsung 9 San Antonio SANS GSLC sar sarbanes oxley SARMA SC SCA SCAP SCAP Compliance Checker scap compliance tool scap tool scc SCCB SCCM SCCM/SME in Dahlgren VA schriever Scientific Scientists SCOM SDN SEC DOT securdever security Security+ Certification Security Access Management Security Administrator security agency security analysis security analyst Security Analyst Opportunity security and risk analyst security assessment re security assessment report security assessment reports security assurance security authorization package security clearance securityclearance Security Clearance Career Expos securityclearance jobs Security Clearances in IT security compliance security compliance engineer Security control security control assessor Security Control Assessor Documents 53a Security control interpretation security controls security controls resources part security engineer Security Engineer in Montpelier Security Engineer Location Wayne security guidance Security Identity Management security intelligence security job Security Manager Security Manager at Boston Area security operations center security plan security plus security requirement guide security risk security specialist Security Technical Implementation Guide Security Technical Implementation Guidelines Security Technical Implementation Guides SEIM select Senior .Net Developer Senior Advanced Splunk IT Specialist senior network security engineer separation of duties Separation of Duties with one person ISSO sepm server sgr SharePoint Should I get security plus or experience first Q&A SIEM SIM SIPRNET six fig Six Figures SmartConnectors / FlexConnectors smarts/ionix SME SMTP SOC sod Software Defined Networking Software Developers Software Engineer solarwind Solution Integrator and Architect Source code management (SCM) south carolina SOX SPECIALIST specialist review splunk sql sql server srg SRM sr network engineer Sr Systems Administrator ssaa SSCP SSL ssp Stakeholders Star N9500 Starting IT Starting IT in Community College state stealhead STEM sterling STIG stig library stigs STIGS for Security Control Assessments STIG Update STIG Update - Microsoft Windows 10 STIG STIG V1R1 stig viewer St Paul stress in Cybersecurity strivector sunnyvale support SuSe Switching Jobs to IT Symantac Ghost symantec system System admin System Administrator System Analyst 3 system compliance system engineer System Engineer IV systems administrator system security plan systems engineer t&e Tanium Tanium Software tcp/ip tech Technical Guide to Information Security Testing and Assessment telework test engineer testimonial testing expert texas therapysessions the rmf road The Value of Security Clearances in IT Things to read for Risk Management Framework threats Tivoli Directory Integrator Tivoli Directory Server TN tool too much experience torrance Training Transparent triage triangle park TS clearance types of risk ubuntu UEM Unified Endpoint Management unix usaf USCYBERCOM USDA USMS USPS VA VBScript vcenter virginia virtual virusscan visualization engineer VM VMWare VMWare AirWatch Mobile Device VMware ESX voice VPLEX VPN vse vsel vsphere VT vulnerabilities Vulnerability and Incident Duties Vulnerability Management and Security Patching WAN warm site Web Application firewall (WAF) web gateways webinspect WebSEAL websense Web Sphere Application Server We happened to see the building of ADT during staycation wfh What if we cannot meet the POAM dates (Part 1) what is a risk assessment what is IA what is information assurance What is payment card industry PCI data security standard DSS what is risk what is the national security agency What you Get in the RMF ISSO Foundations Course What’s Up Gold Which course teaches Risk Management Framework window 10 windows Windows 7 windows 10 Windows 2003 windows iss Windows Professional windows server 12 Windows Server 2008 R2 windows server 2012 domain name system Windows Server Update Service (WSUS) Windows Services Wireshark without a clearance Word work workforce writing XP XtremIO ystems Security ZERO

Copyright © 2023 · Author Pro on Genesis Framework · Powered by WordPress.com. · Log in