Products by STS Systems Support, LLC.

The NIST Risk Management Framework is governed by documents known as special publications, including SP 800-37 and SP 800-39 NIST publishes a catalog of security controls known as the SP 800-53 Rev 4 (soon SP 800-53 Rev 5, in 2019), to which defense components will now look to when implementing... Read more »

The old, system-centric, NIST C&A process (NIST SP 800-37) has been revitalized (integrated into NIST’s RMF) and totally transformed into a “near real time risk management” process, based on continuous Information System monitoring – fully integrating the new SAP. This workshop builds on and... Read more »

The course explores new/updated guidance, policy and procedures for implementing a well-developed and thorough approach for building a continuous monitoring program IAW SP 800-137, 800-39, 800-55, 800-128, 800-37 (Rev. 1), 800-53 (Rev. 4 [soon Rev. 5]) and 800-53A. This in-depth course... Read more »