CMMC has become a cybersecurity framework for the defense industrial base with CMMC third-party assessor organizations (C3PAOs) guiding organizations through this complex compliance landscape. We recently spoke with Tony Buenger, Director of Governance, Risk and Compliance at SecureStrux, a C3PAO …
The recent Securities and Exchange Commission (SEC) lawsuit against SolarWinds is a landmark in regulatory enforcement, signaling a new level of accountability for federal contractors. Cybersecurity standards have long been mandated, particularly for the defense industrial base (DIB), and now …
Formulating a blueprint on what to do when your organization experiences some sort of security breach is important. Testing that plan to make sure all responsible parties know what to do is also imperative. That’s where an incident response tabletop …
As your company works to improve its security posture and meet the requirements of NIST 800-171 and CMMC, the mission-critical clouds from Microsoft can provide the foundation you need to move forward. Recently Richard Wakeman, the chief architect for Cybersecurity …
Accelerate Your Path to CMMC compliance with Microsoft Cloud Offerings Read More »
Regulatory updates pertaining to data privacy and information security continue to be rolled out across the country. These changes have the potential to significantly impact obligations surrounding a data security event. Kevin Dolan, a partner at Mullen Coughlin LLC, recently …
Regulatory Trends in Data Privacy and Information Security Read More »
Many CIOs have lived through technology evolutions in their businesses over the last 20 years, including the advent of cloud computing, mobile computing, remote work, and more. How do you make sure to continue to keep pace with the changing …
The government is making progress toward the enforcement of minimum cybersecurity requirements — and with good reason. Chinese hackers stole 60,000 State Department emails in a recent nation-state breach. The Cybersecurity Maturity Model Certification (CMMC) program was instituted to ensure …
Takeaways From CMMC CON 2023: How to Solve Your Compliance Puzzle Read More »
The defense industrial base (DIB) is targeted more than ever, as bad actors seek sensitive information about our military and critical infrastructure. Threats like Volt Typhoon, PowerDrop, and nation-state plots highlight the importance of supply chain cybersecurity and show why …
New Study Shows DIB Hasn’t Improved Cybersecurity. Here’s How to Make Progress. Read More »
Now is the time to begin navigating your path to CMMC compliance—and completing an assessment is an important start. Focus on the requirements, which have always been DFARS clause 252.204-7012 that requires the implementation of the 110 controls of NIST …
Assessment: The First Step in Your CMMC Compliance Journey Read More »
In the race to achieve compliance with regulations like Cybersecurity Maturity Model Certification (CMMC) 2.0, leaders have turned to the cloud. There are mounting concerns about the security of cloud computing, leaving a balancing act with cloud benefits and digitalization …
Cloud Computing and Emerging Technologies: a Q&A with Arcfield CIO Bob Schwendinger Read More »
