For those of you who are covered by DoD’s cybersecurity regulations such as 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting, you probably know that it is a bit of a moving target. We expect a flurry of updates later this spring, but in the mean time, you should be working on compliance. Here is a short update on the status of the rules.
The ban now prohibits having any Bytedance software even installed on any device used in furtherance of a contract, even employee owned devices. Learn more below.
This is the piece that we have been waiting for and it is both short and covers a lot of details. The Title 48 part of CMMC contains the contracting mechanics and it is what you need to understand if you expect to be awarded a contract. If you have questions and you likely will,…
CMMC is definitely a work in progress. However, like all works in progress, there is progress being made. Here is the update for October.
Over the last couple of years we have talked a lot about what is required for CMMC Level 2 certification, but a lot more companies will need to be CMMC Level 1 certified. What is required for this?
External attack surface management tools (EASM) allow anyone to get a sense of your security prep without your permission or even your knowledge. Who uses EASM tools? Your competitors against you, your customers to decide if they want to do business with you, members of the public, your insurance carrier to decide if they want…
In the absence of any meaningful federal privacy law that covers the general population, states are implementing their own privacy laws and they are covering residents of their states without regard to where the data collecting business is. Each state is different, which means more work for businesses as they try to figure out what…
