AQ'S Corner

Photo Credit: WordPress Generative AI

This morning, I was driving my daughter to school like I do most days. It was one of those quiet rides: no music, no chatter, just me watching the world unfold around us. Children, little ones with backpacks too big for their bodies, were darting across busy streets. Some looking. Some not. Teenagers with headsets and phones, many not looking and many just following each other in chaos. No hand-holding. No hesitation. I’m never surprised when I see this anymore because I often see parents and grown adults with phones in hand, not even pausing to make sure the crosswalk light was green.

I felt that familiar mix of fear and frustration. But then something clicked. As I sat at that red light, my brain still wired from months of cybersecurity work drifted back to something I’d been thinking about a lot lately:

The Risk Management Framework (RMF)

Yes. That framework, the one from NIST 800-37 that I studied like scripture when preparing to join the Cybersecurity team and once I joined, that helped shape how I approached risk, systems, and life in general. Even though I’m now navigating the rough waters of job loss, I’m determined to keep what I learned fresh. I’m not letting my knowledge get rusty. And that’s when it hit me like a green light on a busy morning: What if I used the Risk Management Framework to teach parents how to help their kids cross the street? Because let’s be real, Risk Management isn’t just a job. It’s everyday life. It’s in every “hold my hand,” every “look both ways,” every moment we choose caution over convenience. I explain to my daughter that as a pedestrian she has the right away but never assume a car is going to stop for her. I advise her to always be cautious.

The 7 RMF Steps – For Crossing the Street (And Raising Smart Kids)

1. PREPARE

“Let’s talk before we walk.”
Before you open the door, before feet hit pavement, it starts with awareness. You talk to your child. You explain the risks. You mentally note the intersections that are the trickiest.

Just like in cybersecurity: you don’t launch a system without planning. You don’t cross a street without a talk.

2. CATEGORIZE

“Not all streets are created equal.”
Some crosswalks are chill. Some are wild. You look at the type of road, the traffic, the distractions. You gauge the risk.

Just like data systems: some need top-level protection. Others, not so much.

3. SELECT

“Pick your safety tools.”
Hand-holding? Reflective clothing? Crossing guard? You pick what your kid needs for that street. Not every situation requires the same controls.

Like cybersecurity controls, tailored to the risk level.

4. IMPLEMENT

“Now we do the thing.”
You apply your strategy. Walk to the corner. Look both ways. Stop. Listen. Cross only when it’s safe. You lead by example.

Because policies on paper are nothing without action.

5. ASSESS

“Did we do it right?”
Once across, you reflect. Did they follow the rules? Were they distracted? Were you distracted?

Same as reviewing your system security, constant checks for weak spots.

6. AUTHORIZE

“You’ve earned some freedom.”
When they’ve demonstrated good judgment, you allow them to take a bit more responsibility. Maybe they cross with a friend. Maybe they lead while you follow close behind.

Like issuing an ATO (Authorization to Operate). You don’t authorize until the system, or child is ready.

7. MONITOR

“Just because they can, doesn’t mean you stop watching.”
You keep checking in. Observe from afar. Adjust when needed. Reinforce the rules regularly.

Cyber or sidewalk, constant vigilance is how we stay safe.

Why This Matters

That school drop-off wasn’t just a morning routine. It was a wake-up call.

So many of us parents, guardians, aunties, uncles, think we’re teaching safety. But how often are we walking through the process? How often are we checking ourselves, too? How often are we remembering that our kids are watching every move we make? That phone in your hand that makes you less alert, always remember your kid is watching that. 

And for those of us in tech, in transition, in the messy middle of figuring out our next step, this is how we keep our minds sharp. By applying what we know to what we live. By turning frameworks into family wisdom.

To learn more about the Risk Management Framework click here: https://csrc.nist.gov/projects/risk-management