Collaborate Disseminate
According to its own website, FedRAMP serves three different of partners: federal agencies, Cloud Service Providers (CSP) and third-party assessment organizations. This article will focus on CSPs and how a good CSP can provide services that provide mon… Continue reading ExpertOps Federal: Managed Services in a FedRAMP Certified Cloud Has Arrived
Given the situation that many companies, organizations and government agencies have been forced into working remotely due to COVID-19, it is imperative to give some thought about corporate security. Using a VPN for New Stay-at-Home Workers Millions of … Continue reading Are You Ready for the Remote Work’s Toll on Corporate Security?
The shopping season is upon us, and like it or not there are lots of individuals who would love to replace your happiness with their sadness. Thus, at this festive time of the year, it is imperative to give some thought and prep time to you and your fa… Continue reading Staying Safe when Shopping this Holiday Season: Bricks and Clicks Edition
Keeping sensitive data and assets safe is the goal of regulatory cybersecurity frameworks like NIST (National Institute of Standards and Technology). But for government agency security professionals, staying compliant can feel like a Sisyphean task due… Continue reading How Does Tripwire Map to the NIST SI-07 control?
The term “cyber hygiene” pops up frequently in articles, blogs and discussions about cybersecurity. But what does it really mean? Some say it is an ill-defined set of practices for individuals to follow (or ignore). Others say it is a measu… Continue reading Rooted in Security Basics: The Four Pillars of Cyber Hygiene
How is firmware defined today? According to the Tech Terms dictionary, firmware is a software program or set of instructions programmed on a hardware device. It provides the necessary instructions (at startup) for how the device communicates with the o… Continue reading If Firm Implies Secure, Does That Imply My Firmware Is Secure?
The National Institute of Standards and Technology (NIST) has released Special Publication 800-171. The document covers the protection of Controlled Unclassified Information (CUI) in Nonfederal Information Systems and Organizations. The document was designed to provide guidance on ensuring that all systems that process, store, or transmit CUI information are secured and hardened. Compliance to the […]… Read More
The post NIST SP 800-171 Deadline at End of 2017 – Is Your Organization Ready? appeared first on The State of Security.
Continue reading NIST SP 800-171 Deadline at End of 2017 – Is Your Organization Ready?