A risk management framework (RMF) is an organization’s security controls road map for managing its cyber risks. RMFs define how the people in an organization utilize processes to manage technology, ensure oversight, and reduce risk exposure. The framework often serves multiple purposes, from evaluating the maturity of security controls to demonstrating due diligence in securing...Read More
As COVID-19 impacted operations for many businesses across the world, a work from home environment has quickly become a new normal for many employees. In WFH scenarios, company and client data is exchanged between desktop devices and servers that reside in corporate facilities or the cloud. How that data is managed in transit and at...Read More
Prepare your Staff Let’s face it…there are no easy breaks in business. And the malicious players are happy to exploit your employees at every turn. The onslaught of emails and phone calls specifically designed to deceitfully extract money from your firm will not stop. The most important thing you can do is prepare your staff. ...Read More
Should you be in compliance with NIST SP 800-171 but decided to put this process on hold? Now is a good time to start since the DoD recently announced that within the next 18 months, they will start auditing companies’ cybersecurity procedures that want to win contracts. Access the full article here – https://federalnewsnetwork.com/defense/2019/03/dod-to-start-crackdown-on-contractors-not-complying-with-cybersecurity-standards-will-also-add-more-compliance-rules/ ...Read More
News, that was revealed this year of a defense contractor losing sensitive data to China, has heightened the focus on NIST 800-171compliance. Protecting military data is a top priority for the DoD, and China is just one of many entities focused on nefariously obtaining this this information. Without critical defenses in place to safeguard data...Read More
The Department of Defense (DoD) issued a Notice and Request for Comment on draft guidance that DoD proposes for assessing contractors’ System Security Plans (SSPs) and their implementation of the security controls in NIST Special Publication 800-171. DFARS 252.204-7012 requires defense contractors to provide security for networks where covered defense information is processed, stored, or...Read More
An audit was recently created to determine whether existing Missile Defense Agency (MDA) contractors implemented proper security controls and processes to protect classified and unclassified ballistic missile defense system (BMDS) technical information from internal and external threats. The audit includes MDA responses and recommendations for each comment. This is the first of two audits to...Read More
Welcome to part three of our 3-part series about security and compliance. For those of you who missed part one or two, feel free to follow these links to get up to speed on this series: Part 1: Related but Not the Same, and Part 2: Compliance Means We’re Secure, Right? In the previous two...Read More
Welcome to part 2 in our 3 part series about security and compliance. For those of you who missed part one, feel free to give it a quick read here. When the need for compliance hits your organization, many things can be involved, such as hiring outside consultant help, purchasing new hardware and software, even...Read More
