If you are finding it a challenge to figure out the requirements of the updated cybersecurity maturity model certification (CMMC), you are not alone. CMMC 2.0, currently has two principal levels, level one and level two. Let’s walk through how […]
CMMC Assessment Guide: How to Scope Your Certification Process Read More »
One of the first steps in crafting the cybersecurity plan for your company is knowing what information needs to be protected. With all of the designations of information forming an alphabet soup, figuring out how to proceed can seem challenging.
How to Categorize Non-Public Information Read More »
Recently, the National Institute of Standards and Technology (NIST) re-released the Draft Special Publication (SP) 800-171B as Draft SP 800-172. This document is in final draft review with all comments due August 21, 2020. What is new in NIST 800-172?
NIST SP 800-172: Advanced Security Controls for an Advanced Persistent Threat Read More »
You have completed your NIST 800-171 security controls assessment to see how your company is doing in meeting the requirements of the standard. The evaluation revealed some gaps within your organization’s implementation of the solutions, tools, and processes you have
Top Five Most Difficult Controls to Implement Under NIST 800-171 Read More »
Cybercriminals are constantly looking for ways into your system.
Who’s Been Playing Solitaire on the Domain Controller? Read More »
Companies are becoming increasingly enamored with the advantages offered by cloud computing. However, many mistakenly assume that once you upload your data, it’s up to the cloud service provider (CSP) to keep it all safe and sound.
That Doesn’t Apply To Us; We Do That In The Cloud Read More »
On December 31, 2017, the deadline passed for defense suppliers to comply with NIST 800-171, a requirement specified in Defense Federal Acquisition Regulation Supplement 252.204-7012 “Safeguarding Covered Defense Information and Cyber Incident Reporting.” This mandate attempted to ensure a higher
NIST Compliance — It’s Never Too Late! Read More »
More than two years ago, the Department of Defense (DOD) sounded the alarm for increased cybersecurity with a new set of controls designed to raise the level of safeguarding standards across the industry. The requirements specified in Defense Federal Acquisition
3 Challenges to Meeting Supply Chain Cybersecurity Requirements Read More »
