Does my IT Managed Service Provider need to comply with CMMC?

Most small business Department of Defense (DoD) contractors do not have the resources to hire a full-time IT staff, which is why we typically look

May 11, 2022

How to Mark Controlled Unclassified Information (CUI)

NIST 800-171 and Cybersecurity Maturity Model Certification require Department of Defense (DoD) contractors to “Mark media with necessary CUI markings and distribution limitations”. A basic

March 30, 2022

Is remote work allowed for CMMC?

For the last two years, many Defense Industrial Base (DIB) members have grown accustomed to working remotely. However, with the rapidly approaching Cybersecurity Maturity Model

March 25, 2022

The importance of cybersecurity user training in NIST 800-171

We’ve made the assertion in our Totem Top 10 that, after you have gathered a complete inventory of all your IT system assets and identified

January 13, 2022

Notes from CMMC-AB’s November 2021 Town Hall

The Cybersecurity Maturity Model Certification (CMMC) program began with the ambitious goal of introducing compliance and oversight to roughly 300,000 defense contractors. Not surprisingly, this

December 6, 2021

An overview of CMMC 2.0

On November 4th, 2021, the Department of Defense (DoD) announced major changes to the Cybersecurity Maturity Model Certification (CMMC). This announcement described a transition of

November 23, 2021

Simple CUI Handling Guide for Employees (with free download)

Employee CUI Handling Guide Small businesses in the DoD contractors, subcontractors, and vendors –members of the DoD Industrial Base (DIB)–have lots to do to secure

October 15, 2021

Can you store CUI system credentials in password managers?

We were intrigued by a comment we recently received from Brian Ruthrauff on our password policy blog with regard to storing CUI system credentials in

September 23, 2021

What Does the Term “Basic” Mean in Relation to DoD Contractor Cybersecurity

We’ve noticed some confusion from our clients stemming from the various ways the DoD uses the term “Basic” in conjunction with its supply chain cybersecurity.

March 5, 2021

Tag: CUI