The Department of Defense/War just released an update to the official CMMC FAQs. While the update does not change requirements or timelines, it does remove long-standing misinterpretations held by many organizations and service providers. These updates reinforce what we have […]
CMMC Update: Four New DOD Clarifications That Impact Compliance Read More »
The Cybersecurity Maturity Model Certification (CMMC) framework, developed by the Department of Defense (DOD), defines three CMMC levels to strengthen cybersecurity across the defense industrial base (DIB). It has evolved to address many of the growing needs and cybersecurity practices
Getting Started with CMMC: Overview and Levels Read More »
Outsourcing any aspect of your business can be a daunting task—so it’s understandable that business owners and stakeholders may have concerns about letting another entity assume some responsibilities. Why should you rely on an outside resource for management of your
Why to Outsource Cybersecurity Compliance Management Read More »
The first CMMC Level 2 certification requirement is officially live on SAM.gov in a draft section L and M, in anticipation of the final rule’s implementation on December 16th. This milestone marks a pivotal moment for the Defense Industrial Base
CMMC Level 2 Certification Now Required for DOD Contracts Read More »
As your organization works to improve its security posture, a system security plan (SSP) is a good tool to help you achieve your objectives. Not only that, an SSP is required for organizations that handle controlled unclassified information (CUI) and
Components of an Effective System Security Plan Read More »
As a defense contractor or supplier, making sense of the regulatory landscape can be challenging. To achieve compliance with a list of regulations, you must implement the necessary security controls, reporting procedures, and risk management processes. It is also essential
DFARS vs CMMC: Navigating the Regulatory Landscape Read More »
If your company is a member of the defense industrial base and engaged in business with the DOD, chances are you are already aware of NIST Special Publication 800-171 (NIST 800-171, which outlines the 110 cybersecurity controls necessary to secure
NIST Compliance Assessments: Understanding the Basics Read More »
CMMC 2.0 is the latest version of the Cybersecurity Maturity Model Certification (CMMC) framework, which is designed to assess and enhance the cybersecurity posture of organizations that do business with the Department of Defense (DOD). The CMMC 2.0 framework has
An Overview of CMMC 2.0 Controls Read More »
The Cybersecurity Maturity Model Certification (CMMC) was developed by the Department of Defense (DOD) to ensure that all contractors and subcontractors working with the DOD have adequate cybersecurity measures in place to protect federal contract information (FCI) and controlled unclassified
Understanding CMMC Maturity Levels Read More »
