DoDI 8510 Risk Management Framework (RMF) for DoD Information Technology (IT)

DOD Instruction 8510.01 Incorporating Change 2 29 July 2017 DODI 8510.01 establishes associated cybersecurity policy, and assigns responsibilities for executing and maintaining the Risk Management Framework (RMF). The RMF replaces the DoD Information Assurance Certification and Accreditation Process (DIACAP) and manages the life-cycle cybersecurity risk to DoD IT.
Directs visibility of authorization documentation and reuse of artifacts between and among DoD Components deploying and receiving DoD IT.
Provides procedural guidance for the reciprocal acceptance of authorization decisions and artifacts within DoD, and between DoD and other federal agencies, for the authorization and connection of information systems. Why buy a book you can download for free? First you gotta find a good clean (legible) copy and make sure it's the latest version (not always easy). Some documents found on the web are missing some pages or the image quality is so poor, they are difficult to read. We look over each document carefully and replace poor quality images by going back to the original source document. We proof each document to make sure it's all there - including all changes. If you find a good copy, you could print it using a network printer you share with 100 other people (typically its either out of paper or toner). If it's just a 10-page document, no problem, but if it's 250-pages, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour. It's much more cost-effective to just order the latest version from Amazon.com This book is published by 4th Watch Publishing and includes copyright material. We publish compact, tightly-bound, full-size books (8 1/2 by 11 inches), with glossy covers. 4th Watch Publishing is a Service Disabled Veteran-Owned Small Business (SDVOSB). If you like the service we provide, please leave positive review on Amazon.com. For more titles published by 4th Watch Publishing, please visit: usgovpub.com WhitepaperNIST Framework for Improving Critical Infrastructure Cybersecurity NIST SP 800-12 An Introduction to Information Security NIST SP 800-18 Developing Security Plans for Federal Information Systems NIST SP 800-31Intrusion Detection Systems NIST SP 800-34 Contingency Planning Guide for Federal Information Systems NIST SP 800-35Guide to Information Technology Security Services NIST SP 800-39Managing Information Security Risk NIST SP 800-40 Guide to Enterprise Patch Management Technologies NIST SP 800-53 Rev 5 Security and Privacy Controls for Information Systems and Organizations NIST SP 800-53A Assessing Security and Privacy Controls NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems UFC 4-020-01DoD Security Engineering Facilities Planning Manual UFC 4-021-02Electronic Security Systems NISTIR 8144Assessing Threats to Mobile Devices & Infrastructure NISTIR 8151Dramatically Reducing Software Vulnerabilities NIST SP 800-183 Networks of 'Things' NIST SP 800-184 Guide for Cybersecurity Event RecoveryFor more titles, visit usgovpub.com