First, what is a PoAM? A PoAM is, basically, a plan to fix any issues that were found during an assessment. Under CMMC, currently, a company can miss some controls and still get a provisional check mark. But, the rules as to what can be in a PoAM – that is pretty restricted. As is the length of time you have to fix those items. Learn about PoAMs under CMMC.
Do you have to comply with CMMC? Here is an update with the current status of things – along with a little history – as of today. Audio Video
Ever try to cancel a subscription online? Or even figure out when the subscription is due to be renewed? That difficulty is intentional and is now against the law in many states and countries. If you operate an online presence, it is important for you to understand what you are allowed to do and what…
The executive branch has released another pillar in its cybersecurity strategy. This administration has done more that past administrations on cybersecurity including the National Defense Strategy, the National Cybersecurity Strategy, the DoD Cyber Strategy and the National Defense Industrial Strategy. The newest piece of this is the Defense Industrial Base Cybersecurity Strategy 2024. This is…
For those of you who are DoD contractors (and even if you are not), here is one thing that you can do that will improve your security program and, if you are a DoD contractor, will add 20 or more points to your NIST SP 800-171 SPRS Score. Audio Video
Over the last couple of years we have talked a lot about what is required for CMMC Level 2 certification, but a lot more companies will need to be CMMC Level 1 certified. What is required for this?
As of December 16, 2024 CMMC Title 32 – the program part – is live. That means you can request to get assessed and you can enter your CMMC Level 1 attestation in SPRS. You will likely be able to add your Level 2 attestation in later, but that is not there yet. Initially, your…
