In the DIB world, not all CMMC assessments are created equally — especially when safeguarding our CUI Assets. Understanding the difference between Gap and Readiness Assessments isn’t just essential but can also be crucial. News Flash—Gap Assessments Are Not the Only Option Many believe that a Gap Assessment is the go-to for every situation. But […]
With the DoD’s new memo tightening FedRAMP requirements for cloud services, it may be time to develop a new approach.
In January 2024, NIST released critical updates to NIST 800-171 revision 3. Here’s everything you need to know to achieve compliance.
In 2023, the DIBCAC revealed the 10 most frequently failed NIST 800-171 requirements. Here are the common mistakes to avoid.
Discover the differences between Ransomware Assessments by SP6 and penetration testing, and learn which is right for your organization.
Disclaimer: NIST 800-171 Revision 3 is in DRAFT form, and public comments will be gathered before the publication is made final. 1. Resource Allocation = Time & Money Even though the total count of security requirements in the recently released draft of NIST 800-171 Rev. 3 remained steady with Rev. 2, the requirements were expanded […]
A law passed by Congress late last year allocated $1 billion in cybersecurity grants for state and local governments to improve their digital defenses.
Back in September, we wrote a blog about the Cybersecurity Maturity Model Certification (CMMC) program. In it, we explained how the Department of Defense introduced CMMC in 2019 to strengthen cybersecurity standards for Department of Defense (DoD) contractors. CMMC builds a set of cybersecurity requirements into acquisition programs. It’s designed to help provide the DoD with confirmation that firms within the Defense Industrial Base (DIB) are meeting those requirements. Why a Change from CMMC 1.0 to 2.0? […]
