GRC Tools: What to Look For

GRC Tools: What to Look For

Governance, Risk, and Compliance (GRC) frameworks are essential for organizations navigating the complex regulatory landscape. Whether you’re working toward immediate certification, like the Cybersecurity Maturity Model Certification (CMMC), or looking to improve long-term strategic decision-making, the right GRC tools can be a game changer. Here’s how a well-chosen GRC system can address both your short-term…

DoD Takes Next Step Toward CMMC

DoD Takes Next Step Toward CMMC

When it introduced CMMC 2.0 in 2021, the United States Department of Defense signaled that it was simultaneously both softening some of the requirements that were in early versions of its Cybersecurity Maturity Model Certification (“CMMC”) program and taking a more structured approach to implementing CMMC. As part of that structured implementation, DoD formalized CMMC by crafting an…

Disseminating CUI to Others

Disseminating CUI to Others

Controlled Unclassified Information (“CUI”) is sensitive, unclassified information. This means that not only must CUI not be available to the general public, but also that access to the information must not be granted to anyone unless they have a “lawful government purpose” to handle that information. Things get even a little more confusing when CUI is subject to export controls,…

NIST Releases Final Versions of SP 800-171 Rev. 3 and SP 800-171A Rev. 3

NIST Releases Final Versions of SP 800-171 Rev. 3 and SP 800-171A Rev. 3

The National Institute of Standards and Technology (NIST) has published the final versions of Special Publications (SP) 800-171 Rev. 3 and 800-171A Rev. 3. These publications are crucial for organizations handling Controlled Unclassified Information (CUI) and provide updated guidelines for assessing and implementing security requirements to protect CUI. Newly released: Implications for FutureFeed Users It is important for…

Access the CMMC Mock Assessment Webinar Materials

Access the CMMC Mock Assessment Webinar Materials

Welcome to the post-webinar resource page for our “Navigating the Unknowns: A Live Mock CMMC Assessment Demonstration.” Below, you’ll find access to both the recording of the session and the presentation slides from the webinar held on May 2nd for your continued learning. On-Demand Recording Missed any part of the webinar or want to revisit…

32 CFR Part 236 Rule Change Finalized

32 CFR Part 236 Rule Change Finalized

The rule change to 32 CFR Part 236 primarily modifies the Defense Industrial Base (DIB) Cybersecurity (CS) Program to expand eligibility and streamline cyber incident reporting requirements among defense contractors. Here’s a comprehensive summary of the significant changes and their implications: Changes to Eligibility and Reporting Requirements Implications of the Changes Financial and Operational Impact…

End of content

End of content