The recent Securities and Exchange Commission (SEC) lawsuit against SolarWinds is a landmark in regulatory enforcement, signaling a new level of accountability for federal contractors. Cybersecurity standards have long been mandated, particularly for the defense industrial base (DIB), and now …
The government’s suggested changes to NIST 800-171 were recently released. This third revision of the standard presents a handful of changes and places focus on supply chain risk. What do these proposed changes mean and how should your organization move …
As you chart your company’s cybersecurity path and prioritize your initiatives, it’s important to maintain a clear view of the regulatory landscape. There’s been a lot going on recently including a new national policy introduced by the White House. What …
The first step to achieving your goal of total alignment with the controls outlined in CMMC 2.0 and NIST 800-171 is to craft a strategy, beginning with completing an assessment, on how you will do it. Before you start, you …
It can be confusing to determine how to move forward amid perceived uncertainty regarding CMMC 2.0. Keep in mind that, foundationally, the change from CMMC 1.0 to 2.0 is simply a realignment with NIST 800-171, as well as some changes …
Right now, many organizations are struggling to make sense of the recent information released regarding the evolution of the CMMC standard, specifically the retirement of version 1.0 and the introduction of revision 2.0. After reviewing the new materials, the question …
In this day and age, it is not uncommon for a story of a cyberattack to be front-page news. What is unsettling, however, is that the prevalence of these breaches is far more numerous than reported. And what is at …
Why Mandatory Cybersecurity Minimums are a Matter of National Security Read More »
Since the revision of the CMMC cybersecurity requirement was announced last month, we have been analyzing and reporting on some of the changes in a series of blogs. So far we’ve covered a range of topics, including the context for …
In our series of blogs on the newly announced CMMC 2.0 topic, we started by discussing the context for the update and also wrote about the impact on assessments. Our next topic to discuss is the changes to a project management …
As the discussions around the impact of the newly announced CMMC 2.0 continue to swirl, we are here to apply our knowledge to our analysis of the news. In our series of blogs on the topic, we started by discussing …
