As your organization works to improve its security posture, a system security plan (SSP) is a good tool to help you achieve your objectives. Not only that, an SSP is required for organizations that handle controlled unclassified information (CUI) and
Components of an Effective System Security Plan Read More »
Cloud services have become integral to many organizations, including Department of Defense (DOD) contractors. However, using cloud platforms that handle Controlled Unclassified Information (CUI) comes with stringent security requirements from the Defense Contract Management Agency (DCMA). The DCMA is taking
Understanding DCMA’s FedRAMP Moderate Equivalency Standards Read More »
As a defense contractor or supplier, making sense of the regulatory landscape can be challenging. To achieve compliance with a list of regulations, you must implement the necessary security controls, reporting procedures, and risk management processes. It is also essential
DFARS vs CMMC: Navigating the Regulatory Landscape Read More »
CMMC 2.0 is the next generation of cybersecurity requirements for Department of Defense (DOD) contractors and subcontractors. It’s coming soon, expected to be in place as early as Q4 2024. Unlike the current DFARS standards, third-party certification of full compliance
Choosing a CMMC Provider Focused on Full Compliance Read More »
CMMC 2.0 is the latest version of the Cybersecurity Maturity Model Certification (CMMC) framework, which is designed to assess and enhance the cybersecurity posture of organizations that do business with the Department of Defense (DOD). The CMMC 2.0 framework has
An Overview of CMMC 2.0 Controls by Level Read More »
The Cybersecurity Maturity Model Certification (CMMC) was developed by the Department of Defense (DOD) to ensure that all contractors and subcontractors working with the DOD have adequate cybersecurity measures in place to protect federal contract information (FCI) and controlled unclassified
Understanding CMMC Maturity Levels Read More »
CMMC 2.0 is finally on the near horizon. And full compliance will be mandatory. The transition of DOD contractor cybersecurity requirements from the existing DFARS (Defense Acquisition Regulation Supplement) to the new Cybersecurity Maturity Model Certification, or CMMC 2.0, is
CMMC 2.0: Partial compliance is noncompliance. Read More »
Chances are your company finds it challenging to navigate the path to improving cybersecurity, including implementing the controls of NIST 800-171 and achieving compliance with CMMC 2.0. What can you do and how do you move forward? We recently sat
How to Improve the Cybersecurity at Your Company Read More »
If you’re a company that serves defense industry customers or hopes to, chances are you’re aware of U.S. Department of Defense (DOD) cybersecurity requirements like CMMC 2.0 to protect sensitive information. Up to now that effort has been under DFARS—a
CMMC 2.0 on the Horizon: Are You Prepared? Read More »
Making sense of the threat landscape can be an exhaustive exercise for companies in the defense industrial base (DIB). Various parts of the government are working together to make sure at the end of the day the warfighter has secure
How NSA Supports the Defense Industrial Base Read More »
