While gap, readiness, and business-process-mapping assessments are crucial in preparing organizations for CMMC compliance, another type of assessment — the risk assessment — is critical to a holistic security strategy.
In the DIB world, not all CMMC assessments are created equally — especially when safeguarding our CUI Assets. Understanding the difference between Gap and Readiness Assessments isn’t just essential but can also be crucial.
As we move further into a regulation-dominated digital era where privacy and information security are becoming critical to business success, should we expect companies doing business with the DoD to reconsider “Cloud First” for traditional on-premises solutions or data centers?
On 10 January 2024, The National Institute of Standards and Technology (NIST) shared critical updates to Special Publication 800-171, Revision 3.
Achieving CMMC / DFARS compliance is no easy feat. With 110 controls and 320 objectives, the NIST 800-171 standard can be challenging to even the most experience
Disclaimer: NIST 800-171 Revision 3 is in DRAFT form, and public comments will be gathered before the publication is made final.
The $1.2 trillion Infrastructure, Investment, and Jobs Act signed into law at the end of 2021 includes $1 million to strengthen cybersecurity at state, local,...
Back in September, we wrote a blog about the Cybersecurity Maturity Model Certification (CMMC) program. In it, we explained how the Department of Defense introduced CMMC in 2019 to strengthen cybersecurity standards for Department of Defense (DoD) contractors.