The Colonial Pipeline ransomware attack has prompted soul-searching debates about what we need to prevent the next attack. Commentators have questioned whether cybersecurity best practices are enough, or whether government standards, from the Cybersecurity Maturity Model (CMMC) CMMC to President […]
Cybersecurity best practices aren’t the problem. Lack of enforcement is. Read More »
Since the inaugural CMMC Con, we’ve seen some of the most malicious attacks on American infrastructure ever executed. The SolarWinds attack reverberated across the entire government as agencies scrambled to discover what nation-state attackers had accessed and stolen. The Colonial
Dr. Robert Spalding to Address Nation-State Attacks at CMMC Con 2021 Read More »
One of the first steps in crafting the cybersecurity plan for your company is knowing what information needs to be protected. With all of the designations of information forming an alphabet soup, figuring out how to proceed can seem challenging.
How to Categorize Non-Public Information Read More »
The constant evolution of cybersecurity standards that must be met in order to do business with the Department of Defense (DOD) can be overwhelming. Make sure your team is capable of achieving and maintaining compliance with Defense Federal Acquisition Regulation
How to Become a Compliance Black Belt Read More »
CMMC compliance stands in the way of revenue for every defense contractor in the supply chain. Now that CMMC is a reality for the Defense Industrial Base (DIB), learn how contractors — primes and subs, large and small, foreign-owned —
CMMC Con 2021 Opens Registration, Reveals Theme and Speakers Read More »
To understand just how consequential president Biden’s executive order on cybersecurity is for federal contractors, look no further than the Wall Street Journal article that bluntly explained how the new order will impact federal contractors: “Contractors that fail to comply with
There are many ways to achieve CMMC compliance, from fully insourced IT, cybersecurity and governance to fully outsourced managed services, each carrying various costs and risks. While the cost of compliance is a valid concern, there’s one constant across all
How to Get More Value Out of CMMC Managed Services Read More »
The enclave approach to CMMC compliance is one of the most cost effective and least disruptive ways to safeguard CUI. You can maintain high-value custodial security of CUI without upending your existing processes, procedures, and people. That way, you can
CMMCEnclave: Add Versatility with a More Flexible Approach Read More »
CMMC is not a compliance framework. It’s a maturity model. That has big implications for how you approach compliance, but also how you keep track of all the elements that make up compliance. And yet, visibility has been one of
CMMC Compliance Dashboard: Gain New Visibility into Compliance Read More »
I’m a DOD contractor; what do I need to do for CMMC? To start or continue working with the DOD, all contractors must achieve and maintain the appropriate level of cybersecurity compliance. But what do you need to do, and
