New This Is Fine: Matt and Chris Sowards (Watchtower Security Consultants) on why the ATO process works like registering a car, why “not applicable” is often the wrong answer, and what FedRAMP does and doesn’t cover.

New This Is Fine: Matt and Chris Sowards (Watchtower Security Consultants) on why the ATO process works like registering a car, why “not applicable” is often the wrong answer, and what FedRAMP does and doesn’t cover.
GAO found that CIO risk ratings understated trouble on 24 of 53 major federal IT projects — including all 6 it reviewed at the VA. OMB's response: retire the Dashboard that shows the ratings. No timeline. No replacement announced. bureaucracy.news #FederalIT #FITARA #GAO #GovernmentAccountability…
GAO audit of 24 U.S. federal agencies found none fully prepared for post-quantum cryptography migration, with incomplete crypto inventories, inaccurate funding estimates, and zero PQC testing. OMB's $7.1B migration estimate relies on flawed data.