As you chart your company’s cybersecurity path and prioritize your initiatives, it’s important to maintain a clear view of the regulatory landscape. There’s been a lot going on recently including a new national policy introduced by the White House. What …
The first step to achieving your goal of total alignment with the controls outlined in CMMC 2.0 and NIST 800-171 is to craft a strategy, beginning with completing an assessment, on how you will do it. Before you start, you …
It can be confusing to determine how to move forward amid perceived uncertainty regarding CMMC 2.0. Keep in mind that, foundationally, the change from CMMC 1.0 to 2.0 is simply a realignment with NIST 800-171, as well as some changes …
Right now, many organizations are struggling to make sense of the recent information released regarding the evolution of the CMMC standard, specifically the retirement of version 1.0 and the introduction of revision 2.0. After reviewing the new materials, the question …
In this day and age, it is not uncommon for a story of a cyberattack to be front-page news. What is unsettling, however, is that the prevalence of these breaches is far more numerous than reported. And what is at …
Why Mandatory Cybersecurity Minimums are a Matter of National Security Read More »
Since the revision of the CMMC cybersecurity requirement was announced last month, we have been analyzing and reporting on some of the changes in a series of blogs. So far we’ve covered a range of topics, including the context for …
In our series of blogs on the newly announced CMMC 2.0 topic, we started by discussing the context for the update and also wrote about the impact on assessments. Our next topic to discuss is the changes to a project management …
As the discussions around the impact of the newly announced CMMC 2.0 continue to swirl, we are here to apply our knowledge to our analysis of the news. In our series of blogs on the topic, we started by discussing …
Since CMMC 2.0 was announced last month, there has been a lot of supposition around what it means. Our approach is to only examine information regarding CMMC 2.0 that has come from official government bodies or authorized government bodies, like …
The Colonial Pipeline ransomware attack has prompted soul-searching debates about what we need to prevent the next attack. Commentators have questioned whether cybersecurity best practices are enough, or whether government standards, from the Cybersecurity Maturity Model (CMMC) CMMC to President …
Cybersecurity best practices aren’t the problem. Lack of enforcement is. Read More »
