First, what is a PoAM? A PoAM is, basically, a plan to fix any issues that were found during an assessment. Under CMMC, currently, a company can miss some controls and still get a provisional check mark. But, the rules as to what can be in a PoAM – that is pretty restricted. As is…
As CMMC gets closer to the finish line, the timeline for when you will have to be compliant is coming into sharper view. While you might think that you still have a lot of time to get ready, that timeline might be shorter than you think. Watch or listen to this article to see why.
As if CMMC wasn’t hard enough, there are different types of CMMC certifications. Some you can do yourself, others you can’t. But of course it isn’t so easy. YOU don’t get to choose what you have to do. In many cases, your prime doesn’t get to choose either. Complicated enough? Learn more below.
The Final rule for Title 32 is out. Here is a more detailed explanation of some of the requirements. This is a very complex rule at about 475 pages. Most of that is explanation, but still there is a lot to this part of the rule. Please contact us if – excuse me – when…
There is significant news this month for those of you who will have to comply with CMMC. 60 days from now you may be able to, for the first time, get officially CMMC certified and there are about a hundred companies that have passed the test and are waiting for that day.
In 2021 the DoJ announced the Civil Cyber Fraud Initiative to go after companies that lie about their cybersecurity practices. Under the False Claims Act, the government can recover damages and more. The “damage” could be as simple as we would not have given you the contract if we knew that you were not complying…
This is the piece that we have been waiting for and it is both short and covers a lot of details. The Title 48 part of CMMC contains the contracting mechanics and it is what you need to understand if you expect to be awarded a contract. If you have questions and you likely will,…
Here are two videos; the first one shows you how to create an SPRS account; the second shows how to enter a new score. NOTE: You will see that I got an error on the PIEE administrator role in the first setup. That may be due to the fact that I already have an account…
There is news this month on both fronts – there is progress being made in the CMMC arena and NIST has released 800-171 Rev 3. What do these mean for you? Listen here.
We knew that DoD had to resolve the conflict between the current 7012 DFARS and the CMMC Part 32 rule that was released in December, but we did not know HOW they were going to resolve it. For defense contractors who are wrestling with getting ready for CMMC, their temporary workaround is the best we…
