Yes, it’s not FISMA-related, but hacking coffee pots is funny, I don’t care where you come from.  =)

For reference, the hackable coffee pot is the Jura F90 which comes with its own Internet connection kit for remote troubleshooting.

• Aurora and LOLCATS
• LOLCATS Take on the Pre-Election Slowdown
• Hackers, Protesters, Iran, Twitter, and Lolcats
• Cyberlolcats Watch the Hackers at DefCon
• LOLCATS and NSTIC

Let’s face it, compliance in IT security is a myth.  Compliance in IT security with legacy systems is like a chupacabbra riding a white unicorn chasing a leprechaun while waving Excalibur.  And the auditors just shake their head and wonder why you can’t just comply.

Anyway, on to the LOLCATZ (note that I’m getting all creative-stylie with haikus this week, must be something in the beer last night):

• Government Akountability Office
• Auditors and LULZ
• Continuous Monitoring with LOLCATS
• Audit Requirements come to LOLCATS
• Exhaustive Security Testing is Bad For You

Guys, please remember that the controls from SP 800-53 and the test cases from SP 800-53A need to be tailored.  Otherwise, they’re as useful as a watermelon in a lake is to a kitteh.

• Yet More Security Controls You Won’t See in SP 800-53
• LOLCATS and Firewalls
• Noms and IKANHAZFIZMA
• Oh to be a Program Manager
• Incident Response and Lolcats

Hot on the heels of Security Assessments as Fraud, Waste, and Abuse comes this heartwarming lolcat.

• The Authorizing Official and the Lolcat
• Look Out, Sir Bruce, IKANHAZFIZMA is Coming for You
• Snowmageddon Meets the IKANHAZFIZMA Lolcats
• Happy New Year
• IKANHAZFIZMA Finds Caution Tape

With as much overengineering that people do for low-criticality systems, I’m surprised nobody’s mentioned this idea yet for high-criticality data:  snipers on the roof.  Now that “the cat’s out of the bag”, I figure this will be in the next 800-53 revision.

• The Authorizing Official and the Lolcat
• IKANHAZFIZMA and Transparency
• A Stable InfoSec Program?
• Agencies CISOs Star in LOLCATS!
• Yet More Security Controls You Won’t See in SP 800-53

Truth be told, most people hate POA&Ms because they’re more work for you to do.  Deep down inside, though, they’re a reason to get funding to fix things.

• IKANHAZFIZMA Finds Caution Tape
• Yet More Security Controls You Won’t See in SP 800-53
• LOLCATS, CISOs, and Horror Stories
• OMB Makes it to LOLCAT Fame
• SCAP in Lulz