The enclave approach to CMMC compliance is one of the most cost effective and least disruptive ways to safeguard CUI. You can maintain high-value custodial security of CUI without upending your existing processes, procedures, and people. That way, you can […]
CMMCEnclave: Add Versatility with a More Flexible Approach Read More »
CMMC is not a compliance framework. It’s a maturity model. That has big implications for how you approach compliance, but also how you keep track of all the elements that make up compliance. And yet, visibility has been one of
CMMC Compliance Dashboard: Gain New Visibility into Compliance Read More »
I’m a DOD contractor; what do I need to do for CMMC? To start or continue working with the DOD, all contractors must achieve and maintain the appropriate level of cybersecurity compliance. But what do you need to do, and
As your organization works to determine the meaning and application of the various levels of the newly enacted Cybersecurity Maturity Model Certification (CMMC), questions arise. One particular issue surrounds the issue of SIEM as it pertains to the first level
What Level of CMMC Requires Security Information and Event Management (SIEM)? Read More »
Many defense contractors outsource their IT to a Managed Service Provider (MSP), who generally deliver the IT required and allows a business to focus on their core competency. IT managed services through MSP’s have been around for a long time
If Your MSP Can’t Spell CMMC it is Time to Move On Read More »
The Department of Defense (DOD) has provided Florida’s business community with a $22 billion opportunity, but there’s a catch. Before Florida’s prime and sub-contractor defense companies can win those contracts; they must meet cybersecurity regulations. These standards have become minimums that
Cybersecurity Forum 2021 Continues to Advance U.S. Cybersecurity Conversation Read More »
On the heels of Solarigate and Hafnium, companies are once again evaluating their overall IT and security posture. While ransomware has grabbed much of the attention over the past three years, it’s increasingly obvious nation state-related attacks infiltrating organizations and
Security Strategies for Defense Industrial Base Companies Read More »
The SolarWinds hack and the subsequent Senate hearings attended by principal players in that event have made supply chain cybersecurity a national discussion. Some of the questions being asked suggest that America is for the first time considering how to protect
SolarWinds: DOD Has The Solution, Let’s Get On With It Read More »
Yesterday, Richard Wakeman, Senior Director – Aerospace and Defense at Microsoft, provided a terrific update to his 2019 blog post, Understanding Compliance Between Microsoft 365 Commercial, GCC, GCC-High and DOD Offerings, providing a lot of additional detail, and answering many
Three Observations from Microsoft’s 2021 Compliance Update and the Impact on the DIB Read More »
The US government, through the lead agency, the Department of Defense (DOD) is implementing a new Cybersecurity Maturity Model Certification (CMMC) requirement for all private-sector businesses that work with the DOD, and now we understand that the standard will be
Time to Stop ISO 27001 Efforts and Migrate to CMMC Read More »
