The U.S. has to up-level its cybersecurity. That’s the gist of what we’ve been hearing from multiple sources, including congressional commissions and the Department of Defense (DOD). The alarm bells — and the calls for more stringent security practices — […]
How Cybersecurity Forum 2020 is Advancing the U.S. Cybersecurity Conversation Read More »
Recently, the National Institute of Standards and Technology (NIST) re-released the Draft Special Publication (SP) 800-171B as Draft SP 800-172. This document is in final draft review with all comments due August 21, 2020. What is new in NIST 800-172?
NIST SP 800-172: Advanced Security Controls for an Advanced Persistent Threat Read More »
Current Compliance Landscape Deputy Defense Secretary Patrick Shanahan spoke at the Armed Forces Communications and Electronics Association (AFCEA) on Feb 6, 2018, and said, “The culture we need to get to [around IT security] is that we’re going to defend ourselves
What is the CMMC Shared Security Model and Why is it Needed? Read More »
The US Department of Defense (DOD) has one of the largest supply chains in the world, scaling to hundreds of thousands of different vendors and partners. While valuable, these vital partners in our nation’s defense infrastructure pose a huge cyber
5 Supply Chain Cyber Attacks that Illustrate Why CMMC Is Needed Read More »
We are in unprecedented times. As we all work to maintain as much normalcy in our personal and professional lives as possible, important projects such as those involving your organization’s cybersecurity might not be top of mind. You’ve worked hard
How Is Quarantine Changing Your Cybersecurity Planning? Read More »
In today’s security landscape, threats to your IT infrastructure are constantly evolving. As you work to secure your IT systems and processes, penetration testing (pen testing) is an important component of your plan. Pen testing can help your organization gain
What Penetration Testing Is – and Why Your Organization Should Be Using It Read More »
It has finally arrived, the Cybersecurity Maturity Model Certification (CMMC) version (v) 1.0. CMMC v1.0 changes the DOD acquisition process with certification becoming a pre-RFP requirement to bid a government contract. Like you, CyberSheath has been aggressively following the CMMC’s
DOD Releases CMMC Version 1.0 Read More »
You have completed your NIST 800-171 security controls assessment to see how your company is doing in meeting the requirements of the standard. The evaluation revealed some gaps within your organization’s implementation of the solutions, tools, and processes you have
Top Five Most Difficult Controls to Implement Under NIST 800-171 Read More »
There is a lot your organization is already doing that you can apply to your preparation for the impending launch of CMMC (Cybersecurity Maturity Model Certification). One important and useful component to consider is a Plan of Action and Milestones (POA&M or
How a Plan of Actions and Milestones Fits Into CMMC Read More »
As you are probably aware, there is a new mandatory certification model that will be required to do business with the Department of Defense (DOD). The CMMC (Cybersecurity Maturity Model Certification) builds on best practices established in NIST 800-171 (DFARS),
CMMC Update – How to Start Preparing Your Company for Compliance Read More »
