In 2014, the Department of Defense (DoD) introduced the Risk Management

Framework (RMF) to help federal agencies better manage the many risks

associated with operating an information system.  PEMAC LLC is continuing to

help manage these risks by providing services in this area of concern.

The Risk Management Framework that we as well follow while fulfilling our

client’s needs provides a process that integrates security, privacy, and cyber supply

chain risk management activities into the system development life cycle. The risk-

based approach to control selection and specification considers effectiveness,

efficiency, and constraints due to applicable laws, directives, Executive Orders,

policies, standards, or regulations. Managing organizational risk is paramount to

effective information security and privacy programs; the RMF approach can be

applied to new and legacy systems, any type of system or technology (e.g., IoT,

control systems), and within any type of organization regardless of size or sector.

The essential activities that we provide to our clients to prepare them to manage

security and privacy risks are as follows: