CMMC

Boosting ROI and Gaining a Competitive Edge: How Service Providers Can Leverage Compliance Frameworks in Client Acquisition

In the ever-evolving business landscape, service providers need to find ways to stand out and prove their value to potential clients. By incorporating compliance frameworks into your new client acquisition process, you can demonstrate a commitment to industry standards, security, and quality – ultimately leading to increased ROI, profitability, and competitive advantage. Align with Industry…

Assigned the Task of Getting Your Company Compliant: Burden or Blessing in Disguise?

Hello, dear friends! Today, we’re going to discuss a situation that many of you may have experienced or might encounter in the future – being “burdened” with the task of getting your company compliant. At first glance, this might seem like a daunting and undesirable responsibility. But, what if I told you that this assignment…

Don’t Panic! NIST SP 800-171r3 and FutureFeed

NIST released an initial public draft of NIST SP 800-171 r3 (“r3”) on May 10, 2023. This blog post discusses that draft and our plans for incorporating r3 into FutureFeed. NIST 800-171 Discussion Draft Last year NIST announced that they would be updating 800-171, and asked for public feedback. They used that feedback, as well…

DoD Publishes new DFARS Rule Impacting SPRS

The United States Department of Defense recently published a notice that a new rule, DFARS 252.204-7024, will be published soon. In her recent article (available here for free), Sara Friedman publishes analysis of that new rule, including comments from Robert Metzger, Eric Crusius, and me. The biggest takeaway I see is that DoD is laying a foundation for…

Security Without Governance is not Secure

Background The Internet has quickly revolutionized the way governments, companies, and other organizations conduct business. But in their haste to gain market share and meet client/constituent expectations, many organizations are pushing out products and services that are not, and using IT infrastructure that is not, secure. This has made it easy for criminals and other…

DoD Adds Scrutiny to Contractor Cybersecurity Programs

Background Over the past few years, the US federal government has been gradually trying to improve its cybersecurity program, and has been encouraging contractors to do the same. The US Department of Defense led the way in these efforts, including through a variety of initiatives like DFARS 252.204-7012 and the Cybersecurity Maturity Model Certification (“CMMC”) program. The CMMC program…

End of content