As a security compliance professional, your daily work leads to one goal: passing a C3PAO assessment and maintaining a CMMC-compliant status. This of course is...
CMMC ALERT: Are You Overlooking One-Point Controls That Can’t Be POA&M’d?
Posts by Connor Payne:
CMMC Level 2 Scoping for Operational Technology Environments
As defense contractors and manufacturers progress toward CMMC Level 2 compliance, a critical area of ambiguity lies in how Operational Technology (OT) is treated within the current Level 2 Scoping Guide. Specifically, the treatment of OT within the category of “specialized assets” leaves significant room for interpretation — and potential misalignment with the practical realities of OT risk management.
3 Reasons Why NIST 800-171 Revision 3 SHOULD Impact Your CMMC Strategy
Disclaimer: NIST 800-171 Revision 3 is in DRAFT form, and public comments will be gathered before the publication is made final.