Mastering the request for proposal (RFP) process is critical in defense contracting. It’s a detail-oriented task for any business, even more so for companies that need to comply with Cybersecurity Maturity Model Certification (CMMC) 2.0. So, what do proposal managers […]
Master CMMC Strategies for DoD Cybersecurity RFPs Read More »
Most of the defense industrial base (DIB) consists of small businesses that face the same threats as large tech companies: state-sponsored attacks from America’s adversaries. The DIB often mistakenly assumes that its line of work isn’t attractive to hackers. With
Bailey Bickley on Strengthening DIB Security with CMMC Read More »
When the Department of Justice instituted the Civil Cyber-Fraud Initiative in 2021, utilizing the False Claims Act to hold non-compliant contractors to account, it was no hollow threat. The government recently intervened in a case, including by litigation for the
Julie Bracker to Explore the Impact of the False Claims Act at CMMC CON 2024 Read More »
Defense contractors are focused on their core business objectives and often overlook their responsibility to protect sensitive military data when contracting with the Department of Defense (DOD). It’s easy to take the “no one’s coming for us” mentality, but the
What You’ll Learn About CMMC Security at CMMC CON 2024 Read More »
The long-awaited moment has arrived. On June 27, the Department of Defense (DOD) submitted the final Cybersecurity Maturity Model Certification (CMMC) program rule to the Office of Information and Regulatory Affairs (OIRA). This marks the final step in a years-long
CMMC Final Rule Expected Soon: How to Prepare Now Read More »
Most of the geopolitical attention is focused on overseas conflicts while America fights a silent, digital war at home with its critical infrastructure under attack. The federal government has warned that adversaries are waging cyberattacks that target water systems, electrical
Key Takeaways from CMMC CON 2024: Behind the Screen Read More »
Even though Cybersecurity Maturity Model Certification (CMMC) 2.0 has been in the works for more than a year, many small businesses still have questions. The answers typically aren’t mysteries that require organizations to pause their compliance journeys. There’s plenty we
CMMC Certification Training: Free Courses to Build Compliance Expertise Read More »
As your organization works to improve its security posture, a system security plan (SSP) is a good tool to help you achieve your objectives. Not only that, an SSP is required for organizations that handle controlled unclassified information (CUI) and
Components of an Effective System Security Plan Read More »
Cloud services have become integral to many organizations, including Department of Defense (DOD) contractors. However, using cloud platforms that handle Controlled Unclassified Information (CUI) comes with stringent security requirements from the Defense Contract Management Agency (DCMA). The DCMA is taking
Understanding DCMA’s FedRAMP Moderate Equivalency Standards Read More »
As a defense contractor or supplier, making sense of the regulatory landscape can be challenging. To achieve compliance with a list of regulations, you must implement the necessary security controls, reporting procedures, and risk management processes. It is also essential
DFARS vs CMMC: Navigating the Regulatory Landscape Read More »
