Is RMF Broken? The Real Reason ATOs Keep Getting Delayed

RMF Academy: https://www.rmfacademy.io/

Please Rate the Podcast: https://ratethispodcast.com/techwoke

Check out Openrmf: https://www.soteriasoft.com/products/openrmf-professional.html

Timestamps:

00:00 "Mastering RMF Real-World Skills"

04:24 From Help Desk to Cybersecurity

07:10 "Understanding Frameworks and Perspectives"

09:50 "Breaking Down IT Misconceptions"

14:31 Improving Processes Through Communication

17:11 "Streamlining Solutions and Efficiency"

20:59 "Streamlining RFP Team Collaboration"

24:17 "Web-Based Tools vs. Client-Based"

26:43 "Web-Based Third-Party Assessments"

32:40 Automation and Data Integration Progress

35:13 Automated Cybersecurity and Data Integration

36:18 Automated Data Management Possibilities

40:20 "Automating for Efficiency"

43:53 Automated Compliance with Elastic SIEM

46:03 "Enhanced Layered Security Compliance"

49:37 "Improving RMF and Education"

Video Description:

If you’re navigating the world of government cybersecurity compliance, this episode is for you.

On this episode of the Tech Woke Podcast, I sat down with the founders of Soteria Software, Dale Bingham and David Gould, to unpack how automation is transforming the Risk Management Framework (RMF) process.

We discuss how tools like OpenRMF are streamlining control implementation, accelerating documentation, reducing manual workload, and saving organizations millions in compliance costs. We also break down:

Continuous ATO (cATO) strategies

RMF automation in DoD and federal environments

NIST SP 800-53 control management

POA&M optimization

eMASS workflow challenges

Compliance tool integration

DevSecOps and cybersecurity governance

Common RMF misconceptions

How education reduces compliance risk

If you’re an ISSO, ISSM, security engineer, GRC analyst, contractor, or working in DoD cybersecurity, FedRAMP, CMMC, or federal compliance, this conversation will change how you think about automation and compliance execution.