Background In 2019, the Department of Defense (DOD) officially announced the introduction of a Cybersecurity Maturity Model Certification (CMMC). This unique maturity model is designed to improve the cybersecurity regarding Controlled Unclassified Information (CUI) within supply chains, especially as it applies to the Defense Industrial […]
Evaluating Your MSSP’s Readiness for CMMC Certification Read More »
The U.S. has to up-level its cybersecurity. That’s the gist of what we’ve been hearing from multiple sources, including congressional commissions and the Department of Defense (DOD). The alarm bells — and the calls for more stringent security practices —
How Cybersecurity Forum 2020 is Advancing the U.S. Cybersecurity Conversation Read More »
Recently, the National Institute of Standards and Technology (NIST) re-released the Draft Special Publication (SP) 800-171B as Draft SP 800-172. This document is in final draft review with all comments due August 21, 2020. What is new in NIST 800-172?
NIST SP 800-172: Strengthening Contract Persistent Threat Security Read More »
Current Compliance Landscape Deputy Defense Secretary Patrick Shanahan spoke at the Armed Forces Communications and Electronics Association (AFCEA) on Feb 6, 2018, and said, “The culture we need to get to [around IT security] is that we’re going to defend ourselves
What Is the CMMC Shared Security Model? Read More »
The US Department of Defense (DOD) has one of the largest supply chains in the world, scaling to hundreds of thousands of different vendors and partners. While valuable, these vital partners in our nation’s defense infrastructure pose a huge cyber
5 Cybersecurity Attacks That Highlight the Necessity of CMMC Compliance Read More »
We are in unprecedented times. As we all work to maintain as much normalcy in our personal and professional lives as possible, important projects such as those involving your organization’s cybersecurity might not be top of mind. You’ve worked hard
How Is Quarantine Changing Your Cybersecurity Planning? Read More »
In today’s security landscape, threats to your IT infrastructure are constantly evolving. As you work to secure your IT systems and processes, penetration testing (pen testing) is an important component of your plan. Pen testing can help your organization gain
What Penetration Testing Is – and Why Your Organization Should Be Using It Read More »
It has finally arrived, the Cybersecurity Maturity Model Certification (CMMC) version (v) 1.0. CMMC v1.0 changes the DOD acquisition process with certification becoming a pre-RFP requirement to bid a government contract. Like you, CyberSheath has been aggressively following the CMMC’s
DOD Releases CMMC Version 1.0 Read More »
You have completed your NIST 800-171 security controls assessment to see how your company is doing in meeting the requirements of the standard. The evaluation revealed some gaps within your organization’s implementation of the solutions, tools, and processes you have
Top Five Most Difficult Security Controls to Implement Under NIST 800-171 Read More »
There is a lot your organization is already doing that you can apply to your preparation for the impending launch of CMMC (Cybersecurity Maturity Model Certification). One important and useful component to consider is a Plan of Action and Milestones (POA&M or
What Is a POAM and Why It Matters for CMMC Read More »
