Contractors in the Defense Industrial Base (DIB) know that they must stay compliant with Defense Federal Acquisition Regulation Supplement (DFARS) regulations or risk significant penalties. Still, some put compliance off for some undetermined future date. The U.S. government knows …
Weighing the Pros and Cons of Acting Early on CMMC Compliance Read More »
As you work to create a more secure organization, it is critical that you have a mobile device management (MDM) solution to help you track and oversee your company’s cell phones, tablets, laptops—any device that can physically leave the walls …
As you work to continue toward achieving compliance with NIST 800-171, there are tools and approaches that support your journey. Compliance with that standard is required today, so it’s important that your company take action now. CMMC is coming soon …
Assess, Implement, and Manage (AIM) for Compliance Read More »
Even with all the controls your organization puts in place to guard against cyber-attacks, some efforts from bad actors are bound to get through your defenses. That’s why CyberSheath provides the 24/7 monitoring of our Security Operations Center (SOC). To …
As cyberattacks become ever more prevalent and sophisticated, it’s important to remind your employees to practice good cyber hygiene to help protect your company and your intellectual property. One of the ways that bad actors infiltrate organizations is through a …
What Is Phishing—and How Can You Guard Against it? Read More »
When it comes to protecting digital identity, there needs to be a more sophisticated way to identify, authenticate, and trust identity information. What measures should you take to better protect your systems and information?
Continuing the topic of my recent blog posts, Government Contractors who store or transmit Covered Defense Information (CDI) are required to comply with the 14 control families of the NIST SP 800-171 by December 2017. The DFARS 252.204-7008 clause dictates …
Taking Steps Toward DFARS Compliance: Encryption of Data at Rest Read More »
Serious concerns about potential security flaws in the current global cellular network have been suspected for several years, but have been mostly disregarded as theoretical. In February 2014, suspicions grew significantly when a phone call by a US Ambassador was …
SMS Authentication Is Not Secure: German Hackers Spy On US Congressman Read More »
This is part three of a continuing series on the Federal Acquisition Register ruling 52.204-21, Basic Safeguarding of Covered Contractor Information Systems. If you haven’t read part one or part two, please take a few minutes to read it before …
Earlier this week, the Federal Risk and Authorization Management Program (FedRAMP), released the high-security baseline for cloud services. The release date for the baseline has slipped multiple times over the last few months, due to what sources have said is …
