
This free quarterly publication features timely articles from the IA community. These articles are solicited from such organizations as OSD/Joint Staff, the Combatant Commands, Services, Systems Commands, Government R&D Labs and Academia. Each issue also features regular columns from the DoD CERT and the JTF-GNO.
The Federal Information Security Management Act (FISMA) of 2002 was authored with good intentions, but has endured very poor execution. It’s a generally well known fact that FISMA has had many critics over the years that accuse the law of focusing more on documentation than actual implementation of security practices within the federal space— including the Department of Defense (DoD).

This free quarterly publication features timely articles from the IA community. These articles are solicited from such organizations as OSD/Joint Staff, the Combatant Commands, Services, Systems Commands, Government R&D Labs and Academia. Each issue also features regular columns from the DoD CERT and the JTF-GNO.
Managing compliance and vulnerability assessments can be a daunting task for any organization. Couple these tasks with countless guidelines and mandates; it is understandable that certain processes lack true structure to be implemented properly. Vulnerability assessments are an example of a task that is required throughout the IT industry, but within many organizations lacks a true, structured approach. Multiple vulnerability assessment tools are required to cover the heterogeneous environments that comprise organizations today. This article addresses many of the pain points and can help improve the vulnerability assessment processes within your organization.