As your organization works to determine the meaning and application of the various levels of the newly enacted Cybersecurity Maturity Model Certification (CMMC), questions arise. One particular issue surrounds the issue of SIEM as it pertains to the first level
CMMC SIEM Requirements: Understanding What’s Needed at Each Level Read More »
Many defense contractors outsource their IT to a Managed Service Provider (MSP), who generally deliver the IT required and allows a business to focus on their core competency. IT managed services through MSP’s have been around for a long time
If Your MSP Can’t Spell CMMC it is Time to Move On Read More »
On the heels of Solarigate and Hafnium, companies are once again evaluating their overall IT and security posture. While ransomware has grabbed much of the attention over the past three years, it’s increasingly obvious nation state-related attacks infiltrating organizations and
Security Strategies for Defense Industrial Base Companies Read More »
Yesterday, Richard Wakeman, Senior Director – Aerospace and Defense at Microsoft, provided a terrific update to his 2019 blog post, Understanding Compliance Between Microsoft 365 Commercial, GCC, GCC-High and DOD Offerings, providing a lot of additional detail, and answering many
Three Observations from Microsoft’s 2021 Compliance Update and the Impact on the DIB Read More »
The US government, through the lead agency, the Department of Defense (DOD) is implementing a new Cybersecurity Maturity Model Certification (CMMC) requirement for all private-sector businesses that work with the DOD, and now we understand that the standard will be
CMMC vs ISO 27001: Why It’s Time to Make the Switch Read More »
The Department of Defense (DOD) suppliers were notified at the end of September about the new DFARS Interim Rule designed to collect NIST 800-171 assessment scores from all DOD contractors through submittal to the Supplier Performance Risk System (SPRS). As mentioned in a
Mastering SPRS: Supplier Performance Risk System & Your Score Read More »
Scrutiny of CMMC DIB cybersecurity and DIB compliance has never been higher. The costs and impacts of security lapses are on full display in the wake of the SolarWinds breach, as federal agencies continue to investigate the full scale of
CMMC DIB Executive Survey: Defense Industrial Base Compliance Trends Read More »
SolarWinds, with more than 300,000 global clients, including many federal agencies in the United States and mostly Fortune 500 companies, unknowingly released a software update that included malware providing hackers unobstructed remote access to victim networks. The magnitude of this
Could NIST 800-171 or CMMC have Influenced the Response to SolarWinds? Read More »
Over 14+ years working with the Department of Defense (DOD) contractor cybersecurity compliance requirements have evolved from voluntary to self-certification to now mandatory minimums validated by independent third parties via the Cybersecurity Maturity Model Certification (CMMC); the question of cost
What Does CMMC Compliance Cost? Here’s How to Find Out Read More »
As 2020 ends, and if you missed them, we have rounded up five of our most popular blog posts. This past year was filled with discussion and updates regarding CMMC and NIST 800-171, so not surprisingly, these top posts cover
Our Top Five Blog Posts of 2020 Read More »
