@AriaImagined @cmarieonline 100% you should have a risk register Not to get too into the weeds but beyond the 110 security controls there are 62 NFOs

@AriaImagined @cmarieonline 100% you should have a risk register

Not to get too into the weeds but beyond the 110 security controls there are 62 NFOs or Non-Federal Organization controls that are "expected to be routinely satisfied by non-federal organizations without specification."

These are things the…