Latest Perspectives
Breaking it Down: Why CRMAs Must Implement NIST SP 800-171 Requirements
Clarifying CRMA Obligations and Assessment Expectations This position article addresses common misunderstandings surrounding Contractor Risk Managed Assets (CRMAs). Effectively managing CRMAs is crucial for organizations striving to comply with NIST SP 800-171 Level 2 requirements under the Cybersecurity Maturity Model…
Advancing Compliance Education at FutureFeed
As the new Director of Compliance Education at FutureFeed, I’m thrilled to join a team that has already established itself as a leader in helping organizations navigate complex compliance frameworks like NIST SP 800-171. FutureFeed provides a solid foundation of…
FutureFeed at CEIC East 2024: Insights, Innovation, and Looking Ahead
Hello, friends! When I walked into the dazzling Gaylord National Resort & Convention Center in Maryland for CEIC East 2024, I felt an electric charge in the air. This wasn’t just another cybersecurity conference; it was a gathering of trailblazers,…
Our Biggest Release of 2024 – FutureFeed 6.0
FutureFeed is thrilled to announce the release of FutureFeed 6.0! After 18 months of development, this major upgrade brings powerful new features and expanded framework support to streamline your compliance processes and enhance user experience. New Framework Support FutureFeed 6.0…
The Final CMMC Rule Explained: Key Takeaways
The eagerly awaited CMMC (Cybersecurity Maturity Model Certification) final rule has now been published in the Federal Register, and while it may not be an easy read, its importance cannot be overstated. This article, based on a recent joint webinar…
GRC Tools: What to Look For
Governance, Risk, and Compliance (GRC) frameworks are essential for organizations navigating the complex regulatory landscape. Whether you’re working toward immediate certification, like the Cybersecurity Maturity Model Certification (CMMC), or looking to improve long-term strategic decision-making, the right GRC tools can…
DoD Takes Next Step Toward CMMC
When it introduced CMMC 2.0 in 2021, the United States Department of Defense signaled that it was simultaneously both softening some of the requirements that were in early versions of its Cybersecurity Maturity Model Certification (“CMMC”) program and taking a more structured approach…
Disseminating CUI to Others
Controlled Unclassified Information (“CUI”) is sensitive, unclassified information. This means that not only must CUI not be available to the general public, but also that access to the information must not be granted to anyone unless they have a “lawful government purpose” to handle that…
NIST Releases Final Versions of SP 800-171 Rev. 3 and SP 800-171A Rev. 3
The National Institute of Standards and Technology (NIST) has published the final versions of Special Publications (SP) 800-171 Rev. 3 and 800-171A Rev. 3. These publications are crucial for organizations handling Controlled Unclassified Information (CUI) and provide updated guidelines for assessing and implementing…
Access the CMMC Mock Assessment Webinar Materials
Welcome to the post-webinar resource page for our “Navigating the Unknowns: A Live Mock CMMC Assessment Demonstration.” Below, you’ll find access to both the recording of the session and the presentation slides from the webinar held on May 2nd for…
32 CFR Part 236 Rule Change Finalized
The rule change to 32 CFR Part 236 primarily modifies the Defense Industrial Base (DIB) Cybersecurity (CS) Program to expand eligibility and streamline cyber incident reporting requirements among defense contractors. Here’s a comprehensive summary of the significant changes and their…
CIC2024 Highlight Reel
We were pleased to be the title sponsor of CIC 2024. We learned so much as we helped put together 41 sessions with 53 speakers in Mission Bay, San Diego on March 2024. We already have plans cooking to provide…
Video Interview: Leia Shilobod on Navigating CMMC Compliance with Expertise and Innovation
Mark Berman: I’m Mark Berman. I’m the CEO at FutureFeed, and I’m here with Leia Shilobod at CIC 2024. Anyway, we’re here in Mission Bay at CIC 2024, which is a CMMC conference. Mark Berman: “So what brought you here? And tell…
Video Interview: Victoria Pillitteri from NIST on SP 800-171 Rev. 3 and more
Hi, I’m Mark Berman. I’m here at CIC 2024 in beautiful Mission Bay, San Diego. I’m lucky enough to be here with Vicky Pillitteri from NIST. Vicky has a really important role for us as a nation, which is to…
NIST SP 800-171r3 Final Public Draft Released
The National Institute of Standards and Technology (“NIST”) released two updated DRAFT documents today that are critical to FutureFeed users and the broader CMMC ecosystem. The first, NIST SP 800-171r3, was released as a “Final Public Draft”. As a Final Public…
Advancing Compliance Education at FutureFeed
As the new Director of Compliance Education at FutureFeed, I’m thrilled to join a team that has already established itself as a leader in helping organizations navigate complex compliance frameworks…
FutureFeed at CEIC East 2024: Insights, Innovation, and Looking Ahead
Hello, friends! When I walked into the dazzling Gaylord National Resort & Convention Center in Maryland for CEIC East 2024, I felt an electric charge in the air. This wasn’t…
Our Biggest Release of 2024 – FutureFeed 6.0
FutureFeed is thrilled to announce the release of FutureFeed 6.0! After 18 months of development, this major upgrade brings powerful new features and expanded framework support to streamline your compliance…
The Final CMMC Rule Explained: Key Takeaways
The eagerly awaited CMMC (Cybersecurity Maturity Model Certification) final rule has now been published in the Federal Register, and while it may not be an easy read, its importance cannot…
GRC Tools: What to Look For
Governance, Risk, and Compliance (GRC) frameworks are essential for organizations navigating the complex regulatory landscape. Whether you’re working toward immediate certification, like the Cybersecurity Maturity Model Certification (CMMC), or looking…
DoD Takes Next Step Toward CMMC
When it introduced CMMC 2.0 in 2021, the United States Department of Defense signaled that it was simultaneously both softening some of the requirements that were in early versions of its Cybersecurity Maturity…
Disseminating CUI to Others
Controlled Unclassified Information (“CUI”) is sensitive, unclassified information. This means that not only must CUI not be available to the general public, but also that access to the information must not be granted to anyone…
NIST Releases Final Versions of SP 800-171 Rev. 3 and SP 800-171A Rev. 3
The National Institute of Standards and Technology (NIST) has published the final versions of Special Publications (SP) 800-171 Rev. 3 and 800-171A Rev. 3. These publications are crucial for organizations handling Controlled Unclassified…
Access the CMMC Mock Assessment Webinar Materials
Welcome to the post-webinar resource page for our “Navigating the Unknowns: A Live Mock CMMC Assessment Demonstration.” Below, you’ll find access to both the recording of the session and the…
32 CFR Part 236 Rule Change Finalized
The rule change to 32 CFR Part 236 primarily modifies the Defense Industrial Base (DIB) Cybersecurity (CS) Program to expand eligibility and streamline cyber incident reporting requirements among defense contractors….
CIC2024 Highlight Reel
We were pleased to be the title sponsor of CIC 2024. We learned so much as we helped put together 41 sessions with 53 speakers in Mission Bay, San Diego…
Video Interview: Leia Shilobod on Navigating CMMC Compliance with Expertise and Innovation
Mark Berman: I’m Mark Berman. I’m the CEO at FutureFeed, and I’m here with Leia Shilobod at CIC 2024. Anyway, we’re here in Mission Bay at CIC 2024, which is a…
Video Interview: Victoria Pillitteri from NIST on SP 800-171 Rev. 3 and more
Hi, I’m Mark Berman. I’m here at CIC 2024 in beautiful Mission Bay, San Diego. I’m lucky enough to be here with Vicky Pillitteri from NIST. Vicky has a really…