We are Qmulos

In part 2 of this series, we look at how the Select step of the Risk Management Framework is implemented using a data-driven approach.  The main objective of the Select step is to “select, tailor, and document the controls necessary to protect the information system and organization commensurate with risk…

In part 1 of this series, we look at how the Categorize step of the Risk Management Framework is implemented using a data-driven approach. The main objective of the Categorize step is “to inform organizational risk management processes and tasks by determining the adverse impact to organizational operations and assets,…

Qmulos will be publishing a six-part blog series on a data-driven approach to the Risk Management Framework (RMF) defined in “NIST Special Publication 800-37 Risk Management Framework for Information Systems and Organizations." Why use a data-driven RMF approach? A data-driven approach to RMF uses data automatically collected from your IT…