As the Cybersecurity Maturity Model Certification (CMMC) 2.0 rollout approaches, defense contractors are scrambling to understand and implement the necessary controls. If you’re starting from scratch, achieving CMMC Level 2 compliance may be a daunting task. Join CMMC CON 2024: […]
Key CMMC Level 2 Insights from CMMC CON 2024 Read More »
Most of the defense industrial base (DIB) consists of small businesses that face the same threats as large tech companies: state-sponsored attacks from America’s adversaries. The DIB often mistakenly assumes that its line of work isn’t attractive to hackers. With
Bailey Bickley on Strengthening DIB Security with CMMC Read More »
When the Department of Justice instituted the Civil Cyber-Fraud Initiative in 2021, utilizing the False Claims Act to hold non-compliant contractors to account, it was no hollow threat. The government recently intervened in a case, including by litigation for the
Julie Bracker to Explore the Impact of the False Claims Act at CMMC CON 2024 Read More »
The long-awaited moment has arrived. On June 27, the Department of Defense (DOD) submitted the final Cybersecurity Maturity Model Certification (CMMC) program rule to the Office of Information and Regulatory Affairs (OIRA). This marks the final step in a years-long
CMMC Final Rule Expected Soon: How to Prepare Now Read More »
Most of the geopolitical attention is focused on overseas conflicts while America fights a silent, digital war at home with its critical infrastructure under attack. The federal government has warned that adversaries are waging cyberattacks that target water systems, electrical
Key Takeaways from CMMC CON 2024: Behind the Screen Read More »
Even though Cybersecurity Maturity Model Certification (CMMC) 2.0 has been in the works for more than a year, many small businesses still have questions. The answers typically aren’t mysteries that require organizations to pause their compliance journeys. There’s plenty we
CMMC Certification Training: Free Courses to Build Compliance Expertise Read More »
Cloud services have become integral to many organizations, including Department of Defense (DOD) contractors. However, using cloud platforms that handle Controlled Unclassified Information (CUI) comes with stringent security requirements from the Defense Contract Management Agency (DCMA). The DCMA is taking
Understanding DCMA’s FedRAMP Moderate Equivalency Standards Read More »
As a defense contractor or supplier, making sense of the regulatory landscape can be challenging. To achieve compliance with a list of regulations, you must implement the necessary security controls, reporting procedures, and risk management processes. It is also essential
DFARS vs CMMC: Navigating the Regulatory Landscape Read More »
CMMC 2.0 is the next generation of cybersecurity requirements for Department of Defense (DOD) contractors and subcontractors. It’s coming soon, expected to be in place as early as Q4 2024. Unlike the current DFARS standards, third-party certification of full compliance
Choosing a CMMC Provider Focused on Full Compliance Read More »
If your company is a member of the defense industrial base and engaged in business with the DOD, chances are you are already aware of NIST Special Publication 800-171 (NIST 800-171, which outlines the 110 cybersecurity controls necessary to secure
NIST Compliance Assessments: Understanding the Basics Read More »
