The Final rule for Title 32 is out. Here is a more detailed explanation of some of the requirements. This is a very complex rule at about 475 pages. Most of that is explanation, but still there is a lot to this part of the rule. Please contact us if – excuse me – when you have questions.
First, what is a PoAM? A PoAM is, basically, a plan to fix any issues that were found during an assessment. Under CMMC, currently, a company can miss some controls and still get a provisional check mark. But, the rules as to what can be in a PoAM – that is pretty restricted. As is…
For those of you who are covered by DoD’s cybersecurity regulations such as 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting, you probably know that it is a bit of a moving target. We expect a flurry of updates later this spring, but in the mean time, you should be working on compliance. Here…
There is news this month on both fronts – there is progress being made in the CMMC arena and NIST has released 800-171 Rev 3. What do these mean for you? Listen here.
I recently provided a CMMC update to the Denver chapter of NCMS. That presentation was live and in person and generated a lot of questions and comments. I recreated that presentation here. If you have questions, please contact us.
As the Defense Department moves to more tightly control how Controlled Unclassified Information (CUI) is handled, contractors are going to need to deal with how documents that contain CUI such as drawings or deliverables are printed. Listen to this short explanation of what is going to be required. If you have questions, please contact us….
NIST has released a draft version of the next update to the core standard behind CMMC. If you do work for the US, Canadian or Australian defense departments or are a vendor to one of these organizations or if you are a vendor to a large US corporation, this standard and these changes are important…
