What is NIST SP 800 30
The post What is NIST SP 800 30 appeared first on Security Boulevard.
Continue reading What is NIST SP 800 30
Author Archives: Justin Peacock
Cybersecurity Maturity Model Certification Starts with DFARS 800-171
Why DFARS / NIST SP 800-171?
A few years back, the United States Department of Defense (DoD) released a new regulation, a Defense Federal Acquisition Regulation Supplement, or “DFARS” (DFARS 252.204-7012), which aimed to bolster cybers… Continue reading Cybersecurity Maturity Model Certification Starts with DFARS 800-171
GRC Software and the Impact of Integrated Risk Management
In recent years, the use of integrated risk management (IRM) as a methodology has become widely adopted to help orchestrate and centralize business continuity and functionality. This comes in light of the realization that traditional governance, r… Continue reading GRC Software and the Impact of Integrated Risk Management
What is GRC
Governance, Risk, and Compliance before GRC
The idea of GRC (Governance, Risk Management, and Compliance), has been fundamentally integrated into the idea of how a business should be run for centuries. While it hadn’t been officially acknowl… Continue reading What is GRC
Cybersecurity Maturity Model Certification Domains Explained
The Department of Defense (DoD)’s Cybersecurity Maturity Model Certification (CMMC) is the newest iteration of the DoD’s effort to protect controlled unclassified information (CUI) the defense industrial base (DIB) and the DoD’s … Continue reading Cybersecurity Maturity Model Certification Domains Explained
Tools for expanding NERC CIP across the Enterprise
Scaling the North American Electric Reliability Corporation (NERC) Critical Infrastructure Protection (CIP) compliance requirements across an enterprise can be a daunting task. With an ever-expanding list of assets in both IT and OT that need to b… Continue reading Tools for expanding NERC CIP across the Enterprise
How to Scope Your Organization for NERC CIP
Knowing how to scope your organization for NERC CIP security assessments can be a daunting ordeal. For many information security leaders at power and utility organizations, knowing which IT and OT assets fall within the purview of the North Americ… Continue reading How to Scope Your Organization for NERC CIP
How to Know You Meet NERC CIP Cybersecurity Requirements
North American Electric Reliability Corporation – Critical Infrastructure Protection (NERC CIP) is the presiding set of standards that govern our Bulk Electric System (BES) and protect all those who use it from cyber threats. As a mandatory compli… Continue reading How to Know You Meet NERC CIP Cybersecurity Requirements
How to Report on NERC CIP Standards
Federal Energy Regulatory Commission (FERC) is the governing body in charge of monitoring and enforcing regulations put forth by the North American Energy Reliability Corporation (NERC). Additionally, where NERC is in charge of developing and main… Continue reading How to Report on NERC CIP Standards