The Cybersecurity Maturity Model Certification (CMMC) framework, developed by the Department of Defense (DOD), defines three CMMC levels to strengthen cybersecurity across the defense industrial base (DIB). It has evolved to address many of the growing needs and cybersecurity practices […]
Getting Started with CMMC: Overview and Levels Read More »
At CyberSheath, we’ve worked with forward-thinking clients who want to get ahead of supply chain risk management (SCRM) and engage with their suppliers. We have extensive experience in DFARS and CMMC compliance, providing comprehensive services that streamline and simplify supply
With the threat landscape continuing to evolve, it’s more important than ever to examine the past and the lessons we’ve learned as we plan for the future. At CMMC CON 2024 recently spoke with Nicole Perlroth, esteemed cybersecurity journalist, author,
Navigating Cyber Threats: Lessons Learned from Nicole Perlroth’s Investigations Read More »
Looking ahead, there are two things emerging as it relates to requirements that will have implications for supply chain risk management (SCRM) in the defense industrial base (DIB). To understand how to proceed with SCRM, it’s important to first gain
Stay Ahead of SCRM Challenges: Essential Strategies for Defense Contractors Read More »
Compliance and cybersecurity are constantly evolving. Recently a shift has occurred with the concept of supply chain risk management (SCRM) as a set of requirements across many cybersecurity frameworks—in particular, NIST 800-171 as it applies to the defense industrial base—gaining
What Is Supply Chain Risk Management? A Guide for Defense Contractors Read More »
The first CMMC Level 2 certification requirement is officially live on SAM.gov in a draft section L and M, in anticipation of the final rule’s implementation on December 16th. This milestone marks a pivotal moment for the Defense Industrial Base
The Wait Is Over: Contracts Now Requiring CMMC Level 2 Read More »
Several notable cyberattacks on critical infrastructure organizations this year highlighted the importance of the Defense Industrial Base (DIB) taking security seriously. Even if any DIB contractors wanted to resist, their time has run out. In October, the Department of Defense
2024 in Review: The Final Preparation for CMMC Read More »
If you’ve taken the first steps of identifying and securing your controlled unclassified information (CUI), it’s time to get ready for your CMMC audit. At CyberSheath, we have created a three-piece model, where each component is critical to your success
Preparing for a CMMC Audit Read More »
Starting the journey toward compliance with DFARS 252.204-7012, NIST SP 800-171, or CMMC standards can be challenging, especially when it comes to identifying and securing Controlled Unclassified Information (CUI). For defense contractors, CUI handling isn’t just an internal responsibility; it’s
Mastering CUI Boundaries: A Guide to DFARS 252.204-7012 Compliance Read More »
A recent case involving Georgia Tech Research Corporation and its affiliates highlights a critical trend: the U.S. government is increasingly using the False Claims Act (FCA) to hold defense contractors accountable for cybersecurity noncompliance. In this case, it was alleged
What the False Claims Act Means for the Defense Industrial Base Read More »
