One Framework to Secure Them All (W02b)
The current federal cyber certification landscape is fragmented and duplicative, driving up costs and inefficiencies. This session proposes a unified, risk-based certification anchored in NIST SP 800-53 to establish a minimum government-wide security baseline. Where justified, agencies could layer tailored risk profiles in the form of overlays, with a strong emphasis on reusing existing profiles and recognizing validated controls. This approach streamlines compliance, supports mission-specific needs, and, when paired with shared services, offers a scalable path to stronger federal cybersecurity.