
What the heck is shared responsibility in CMMC?
Most Department of Defense (DoD) contractors, especially small businesses, rely on the help of External Service Providers (ESP) for their operational needs. Whether for day-to-day IT
Most Department of Defense (DoD) contractors, especially small businesses, rely on the help of External Service Providers (ESP) for their operational needs. Whether for day-to-day IT
While Department of Defense (DoD) contractors implementing NIST 800-171 and pursuing a CMMC Level 2 certification will encounter many security controls that require careful interpretation,
For Department of Defense (DoD) contractors that are pursuing Cybersecurity Maturity Model Certification (CMMC) compliance, you may have heard recent buzz of “organization-defined parameters” (ODP)
Federal contractors required to implement the cybersecurity controls in NIST SP 800-171 may be confused when addressing safeguards involving the protection of “sessions”, particularly user
What a loaded question. Buckle up, folks… this could get spicy. When looking to meet the Cybersecurity Maturity Model Certification (CMMC) requirements, many Department of
To clear, to purge, or to destroy? Indeed, that is the question. Since dumpster diving grew in popularity during the 1980s, businesses have shown increased
In continuation of our “What the heck?” series, we explore another NIST 800-171 control that has resulted in confusion for DoD contractors pursuing CMMC compliance.
It’s well-known that the road is long and challenging for Department of Defense (DoD) contractors pursuing a Cybersecurity Maturity Model Certification (CMMC), and especially so
Department of Defense (DoD) contractors that handle Controlled Unclassified Information (CUI) are required, under DFARS clause 252.204-7012, to implement the 110 cybersecurity safeguards outlined in