CMMC Compliance Soon Required for Government Contractors & Subcontracts

Background: NIST SP 800-171 and NIST SP 800-53
If you are currently conducting business with the US government, directly as a contractor or indirectly as a subcontractor, you’re probably familiar with the requirement to comply with the NIST … Continue reading CMMC Compliance Soon Required for Government Contractors & Subcontracts

Cybersecurity Maturity Model Certification (CMMC) Levels

The CMMC model has five defined levels, each with a set of supporting practices and processes. Practices range from Level 1 (basic cyber hygiene) and to Level 5 (advance/progressive). Continue reading Cybersecurity Maturity Model Certification (CMMC) Levels

Cybersecurity Maturity Model Certification (CMMC) Levels

The CMMC model has five defined levels, each with a set of supporting practices and processes. Practices range from Level 1 (basic cyber hygiene) and to Level 5 (advance/progressive). […] Continue reading Cybersecurity Maturity Model Certification (CMMC) Levels

CMMC: The Logical End of ISO 27001, SOC 2 & HITRUST Certifications

In the not-too-distant future, I can clearly see how ISO 27001, SOC 2 and HITRUST certifications could become a diminished, legacy activity, viewed as a rarity left over from marketing efforts to distinguish an organization’s security posture fro… Continue reading CMMC: The Logical End of ISO 27001, SOC 2 & HITRUST Certifications