So… I did what I do and sometimes that means I did some work on the weekend and thought about things, probably a bit too much. But that’s good because it does go with my passionate about GRC thing.
Over the weekend, I went ahead and downloaded the SCF and went through some things that we do and found the authoritative sources that we should be compliant with. I got them all aligned and then harmonized controls and as lame as it sounds, I did some really awesome spreadsheet work this weekend. Come this morning, I plopped key points from it it into my PowerPoint. It’s looking good!
I did some operational work with my work twin, for lack of a better term for him. He gets things and I think he knows that I get things too. I just lack the tribal knowledge he carries.
I spent a lot of time updating and finishing all the questions for the NIST 800-53. I think I need to get some working sessions going on.