The Colonial Pipeline ransomware attack has prompted soul-searching debates about what we need to prevent the next attack. Commentators have questioned whether cybersecurity best practices are enough, or whether government standards, from the Cybersecurity Maturity Model (CMMC) CMMC to President
Cybersecurity best practices aren’t the problem. Lack of enforcement is. Read More »
Since the inaugural CMMC Con, we’ve seen some of the most malicious attacks on American infrastructure ever executed. The SolarWinds attack reverberated across the entire government as agencies scrambled to discover what nation-state attackers had accessed and stolen. The Colonial
Dr. Robert Spalding to Address Nation-State Attacks at CMMC Con 2021 Read More »
One of the first steps in crafting the cybersecurity plan for your company is knowing what information needs to be protected. With all of the designations of information forming an alphabet soup, figuring out how to proceed can seem challenging.
FCI vs. CUI vs. CDI: Classifying Non-Public Information for Compliance Read More »
The constant evolution of cybersecurity standards that must be met in order to do business with the Department of Defense (DOD) can be overwhelming. Make sure your team is capable of achieving and maintaining compliance with Defense Federal Acquisition Regulation
Become a Compliance Black Belt with Security Training That Works Read More »
CMMC compliance stands in the way of revenue for every defense contractor in the supply chain. Now that CMMC is a reality for the Defense Industrial Base (DIB), learn how contractors — primes and subs, large and small, foreign-owned —
CMMC Con 2021 Opens Registration, Reveals Theme and Speakers Read More »
There are many ways to achieve CMMC compliance, from fully insourced IT, cybersecurity and governance to fully outsourced managed services, each carrying various costs and risks. While the cost of compliance is a valid concern, there’s one constant across all
How to Get More Value Out of CMMC Managed Services Read More »
The enclave approach to CMMC compliance is one of the most cost effective and least disruptive ways to safeguard CUI. You can maintain high-value custodial security of CUI without upending your existing processes, procedures, and people. That way, you can
CMMCEnclave: Add Versatility with a More Flexible Approach Read More »
CMMC is not a compliance framework. It’s a maturity model. That has big implications for how you approach compliance, but also how you keep track of all the elements that make up compliance. And yet, visibility has been one of
Improve Compliance Visibility with a Real-Time CMMC Dashboard Read More »
For any of a variety of reasons including lack of communication, slow response times, or prolonged downtime, your organization has decided to change your managed service provider (MSP). Whether you have already signed an agreement with a new MSP or
How to Offboard Your Managed Services Provider: A Complete Checklist Read More »
Yesterday, Richard Wakeman, Senior Director – Aerospace and Defense at Microsoft, provided a terrific update to his 2019 blog post, Understanding Compliance Between Microsoft 365 Commercial, GCC, GCC-High and DOD Offerings, providing a lot of additional detail, and answering many
Three Observations from Microsoft’s 2021 Compliance Update and the Impact on the DIB Read More »
