We need better C&A processes

I would like to generate some discussion on the certification and accreditation processes the government uses. I am particularly interested in the Defense Department Information Assurance Certification and Accreditation Process (DIACAP) guidance, which seems to me to be the bargain basement approach to certification and accreditation. Used alone, DIACAP only provides an agency with the process to achieve certification, while not addressing the ongoing analysis of new threats and vulnerabilities. In fact, most processes except the one the National Institute of Standards and Technology has provided are poorly written when it comes to risk assessment.

Anonymous
SAIC

Featured

  • Cybersecurity
    secure network (bluebay/Shutterstock.com)

    Federal CISO floats potential for new supply chain regs

    The federal government's top IT security chief and canvassed industry for feedback on how to shape new rules of the road for federal acquisition and procurement.

  • People
    DHS Secretary Kirstjen Nielsen, shown here at her Nov. 8, 2017, confirmation hearing. DHS Photo by Jetta Disco

    DHS chief Nielsen resigns

    Kirstjen Nielsen, the first Homeland Security secretary with a background in cybersecurity, is being replaced on an acting basis by the Customs and Border Protection chief. Her last day is April 10.

  • Management
    workflow (Urupong Phunkoed/Shutterstock.com)

    House Dems oppose White House reorg plan

    The White House's proposal to reorganize and shutter the Office of Personnel Management hit a major snag, with House Oversight Democrats opposing any funding of the plan.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.