The recent Securities and Exchange Commission (SEC) lawsuit against SolarWinds is a landmark in regulatory enforcement, signaling a new level of accountability for federal contractors. Cybersecurity standards have long been mandated, particularly for the defense industrial base (DIB), and now […]
What the SEC’s SolarWinds Lawsuit Means for You Read More »
The government’s suggested changes to NIST 800-171 were recently released. This third revision of the standard presents a handful of changes and places focus on supply chain risk. What do these proposed changes mean and how should your organization move
Proposed Changes to NIST 800-171 Read More »
As you chart your company’s cybersecurity path and prioritize your initiatives, it’s important to maintain a clear view of the regulatory landscape. There’s been a lot going on recently including a new national policy introduced by the White House. What
Federal Government Cybersecurity Update Read More »
The first step to achieving your goal of total alignment with the controls outlined in CMMC 2.0 and NIST 800-171 is to craft a strategy, beginning with completing an assessment, on how you will do it. Before you start, you
Planning Your Path to CMMC 2.0 Compliance Read More »
It can be confusing to determine how to move forward amid perceived uncertainty regarding CMMC 2.0. Keep in mind that, foundationally, the change from CMMC 1.0 to 2.0 is simply a realignment with NIST 800-171, as well as some changes
It’s Time to Get Ready for CMMC 2.0 Read More »
Right now, many organizations are struggling to make sense of the recent information released regarding the evolution of the CMMC standard, specifically the retirement of version 1.0 and the introduction of revision 2.0. After reviewing the new materials, the question
Leaning into CMMC as it Evolves Works Read More »
In this day and age, it is not uncommon for a story of a cyberattack to be front-page news. What is unsettling, however, is that the prevalence of these breaches is far more numerous than reported. And what is at
Why Mandatory Cybersecurity Minimums are a Matter of National Security Read More »
Since the revision of the CMMC cybersecurity requirement was announced last month, we have been analyzing and reporting on some of the changes in a series of blogs. So far we’ve covered a range of topics, including the context for
CMMC 2.0: Codifying the Proposed Revision Read More »
In our series of blogs on the newly announced CMMC 2.0 topic, we started by discussing the context for the update and also wrote about the impact on assessments. Our next topic to discuss is the changes to a project management
CMMC 2.0: POA&M Requirement Changes Read More »
As the discussions around the impact of the newly announced CMMC 2.0 continue to swirl, we are here to apply our knowledge to our analysis of the news. In our series of blogs on the topic, we started by discussing
CMMC 2.0: The Effect on Assessments Read More »
