Zero trust architecture for federal agencies. OMB M-22-09, CISA Zero Trust Maturity Model, and the five pillars.
The Cybersecurity and Infrastructure Security Agency released the first half of its microsegmentation guidance on July 29, 2025: Microsegmentation in Zero Trust, Part One. Part One covers the concepts, the challenges, and the benefits. It...
Read the Guide
Most federal agencies have multi-factor authentication (MFA) deployed. Their security teams know the numbers, the policy deadlines, and the vendor deployments. They check the box on MFA and move to the next item on the...
Read the Guide
When Congress passed the Federal Information Security Management Act in 2002, most agencies treated it as a paperwork exercise. Policy documents were written. Controls were documented. Certification and accreditation packages were assembled. Then the Office...
Read the Guide
The Office of Management and Budget Memorandum M-22-09 deadlines closed at the end of fiscal year 2024. The work after the deadline is harder than the work before it. Inspectors General, Government Accountability Office reviewers,...
Read the GuideOne compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.