Blog

False Claims Act and Civil Cyber-Fraud Initiative: What Contractors Need to Know

In October 2021, the U.S. Department of Justice (DOJ) took a monumental step toward curbing cybersecurity fraud among government contractors and grant recipients: The Civil Cyber-Fraud Initiative.   By leveraging the False Claims Act (FCA), the Initiative prosecutes government contractors, subcontractors, and grant recipients who knowingly fail to comply with federal cybersecurity mandates such as DFARS […]

Blog
3 Risks of Overlooking Scoping for CMMC

3 Risks of Overlooking CUI Scoping for CMMC

Identifying how and where Controlled Unclassified Information (CUI) is stored, transmitted, and processed within your organization is a critical first step to achieving CMMC compliance. Many organizations overlook this step, however, leading to gap assessment fatigue, unwanted costs, and a lack of leadership and organizational buy-in.  In this article, we’ll break down everything you need […]

Blog

CMMC Planning in 2024: The Latest Updates to NIST SP 800-171r3

Watch this comprehensive webinar to learn which changes you should pay attention to in NIST SP 800-171 Revision 3, how these changes could affect your organization, and strategies to achieve your 2024 compliance goals. https://vimeo.com/948884019?share=copy Key Learning Objectives:  Understanding the new requirement families introduced in NIST SP 800-171r3 Learning the FISMA requirements that designate NARA […]

Blog
Top 7 Takeaways from CMMC Day 2024

Top 7 Takeaways from CMMC Day 2024

Our team recently participated in CMMC Day 2024, a conference bringing together the top experts and industry leaders in the security compliance space. We had the privilege of hearing from CISOs, practice leaders, government officials, and more about the latest trends and insights in CMMC. Throughout our conversations, a few key themes emerged. Here are […]

Blog
How to Conduct a NIST 800-171 Self-Assessment

How to Conduct a NIST 800-171 Self-Assessment

Conducting a NIST 800-171 self-assessment — also known as a CMMC self-assessment or SPRS assessment — is a critical component of DFARS 252.204-7019 compliance. As a contractor, you’ll need to evaluate your organization against all 320 objectives and upload your score to the Supplier Performance Risk System (SPRS). In this guide, we’ll break down all […]