In the absence of any meaningful federal privacy law that covers the general population, states are implementing their own privacy laws and they are covering residents of their states without regard to where the data collecting business is. Each state is different, which means more work for businesses as they try to figure out what they need to comply with, how to do that and what the business impact is.
There is news this month on both fronts – there is progress being made in the CMMC arena and NIST has released 800-171 Rev 3. What do these mean for you? Listen here.
I recently provided a CMMC update to the Denver chapter of NCMS. That presentation was live and in person and generated a lot of questions and comments. I recreated that presentation here. If you have questions, please contact us.
CMMC is an ever changing target. Here is the newest information on it that we have.
External attack surface management tools (EASM) allow anyone to get a sense of your security prep without your permission or even your knowledge. Who uses EASM tools? Your competitors against you, your customers to decide if they want to do business with you, members of the public, your insurance carrier to decide if they want…
Up until now, CMMC has been a US federal government standard for companies doing business in the public sector. Canada has now joined the group and you should expect more countries to be added to the list. Learn more below.
NIST has released a draft version of the next update to the core standard behind CMMC. If you do work for the US, Canadian or Australian defense departments or are a vendor to one of these organizations or if you are a vendor to a large US corporation, this standard and these changes are important…
