Security News Update for December 22, 2024
This week’s news includes:
This week’s news includes:
As of December 16, 2024 CMMC Title 32 – the program part – is live. That means you can request to get assessed and you can enter your CMMC Level 1 attestation in SPRS. You will likely be able to add your Level 2 attestation in later, but that is not there yet. Initially, your…
This week’s news includes:
This week’s news includes:
This week’s news includes:
First, what is a PoAM? A PoAM is, basically, a plan to fix any issues that were found during an assessment. Under CMMC, currently, a company can miss some controls and still get a provisional check mark. But, the rules as to what can be in a PoAM – that is pretty restricted. As is…
As CMMC gets closer to the finish line, the timeline for when you will have to be compliant is coming into sharper view. While you might think that you still have a lot of time to get ready, that timeline might be shorter than you think. Watch or listen to this article to see why.
As if CMMC wasn’t hard enough, there are different types of CMMC certifications. Some you can do yourself, others you can’t. But of course it isn’t so easy. YOU don’t get to choose what you have to do. In many cases, your prime doesn’t get to choose either. Complicated enough? Learn more below.
There is significant news this month for those of you who will have to comply with CMMC. 60 days from now you may be able to, for the first time, get officially CMMC certified and there are about a hundred companies that have passed the test and are waiting for that day.
In 2021 the DoJ announced the Civil Cyber Fraud Initiative to go after companies that lie about their cybersecurity practices. Under the False Claims Act, the government can recover damages and more. The “damage” could be as simple as we would not have given you the contract if we knew that you were not complying…