Compliance and cybersecurity are constantly evolving. Recently a shift has occurred with the concept of supply chain risk management (SCRM) as a set of requirements across many cybersecurity frameworks—in particular, NIST 800-171 as it applies to the defense industrial base—gaining […]
What Is Supply Chain Risk Management? A Guide for Defense Contractors Read More »
Outsourcing any aspect of your business can be a daunting task—so it’s understandable that business owners and stakeholders may have concerns about letting another entity assume some responsibilities. Why should you rely on an outside resource for management of your
Why to Outsource Cybersecurity Compliance Management Read More »
The first CMMC Level 2 certification requirement is officially live on SAM.gov in a draft section L and M, in anticipation of the final rule’s implementation on December 16th. This milestone marks a pivotal moment for the Defense Industrial Base
The Wait Is Over: Contracts Now Requiring CMMC Level 2 Read More »
A recent case involving Georgia Tech Research Corporation and its affiliates highlights a critical trend: the U.S. government is increasingly using the False Claims Act (FCA) to hold defense contractors accountable for cybersecurity noncompliance. In this case, it was alleged
What the False Claims Act Means for the Defense Industrial Base Read More »
If you are a federal contractor doing business with any part of the United States government, meeting some level of mandatory minimum cybersecurity requirements is in your future if you want to continue to capture that revenue. The Biden administration
Are You Ready for Mandatory Minimum Cybersecurity? Read More »
Those of us in the IT world have deep knowledge of cybersecurity and understand the importance of safeguarding our systems, data, and intelligence from outsiders and nefarious entities. And as members of the defense industrial base, we know that compliance
3 Ways to Make the C-Suite Take Notice of CMMC Read More »
The recent Securities and Exchange Commission (SEC) lawsuit against SolarWinds is a landmark in regulatory enforcement, signaling a new level of accountability for federal contractors. Cybersecurity standards have long been mandated, particularly for the defense industrial base (DIB), and now
What the SEC’s SolarWinds Lawsuit Means for You Read More »
Formulating a blueprint on what to do when your organization experiences some sort of security breach is important. Testing that plan to make sure all responsible parties know what to do is also imperative. That’s where an incident response tabletop
How to Test Your Incident Response Plan Read More »
It’s time to get ready for CMMC 2.0. As of December 16, 2024, the cybersecurity mandate is here. How does your company get started—and how do you balance growing your business, engaging your customers, and managing your operations with all
Compliance Made Easier with CMMC Managed Services Read More »
As you work to better manage your company’s cybersecurity and continue on your path to meeting the requirements of NIST 800-171, chances are you have considered engaging with a managed service provider (MSP) to help you on your journey. Be
5 Things to Look for in a Managed Service Provider Read More »
