FutureFeed Perspectives

Perspectives

Analysis, guidance, and control-level detail from the team helping the Defense Industrial Base achieve, maintain, and prove scalable CMMC compliance.

Rapid. Proven. Affordable.

All Perspectives

17 articles

A balance scale weighing a security shield against a stack of paperwork and costTuesdayPlaybook

Playbook

Why Security Is a Business Decision

Road to ComplianceTuesday PlaybookExecutive

Security gets filed under IT until the day it decides whether you can bid. The contracts you win, the customers who keep you on their supplier list, the liability you carry when something goes wrong: all of it now runs through whether you can prove your security posture. That makes this a decision for the people who own the business outcome, not one to delegate down the org chart.

Read the article

A security shield with a checkmark above icons for training, certification, alerting, and documentationThursdayControls Delivery

Controls Delivery

Awareness & Training (AT): 3.2.1, 3.2.2, 3.2.3

Road to ComplianceThursday Controls DeliveryEveryone

If you have opened NIST SP 800-171, you probably noticed that Access Control (3.1) comes before Awareness and Training (3.2). So why start here? Because the control numbers tell you where to find a requirement, not where to begin building your program. Build the people side first, then layer the technical controls on top.

Read the article

Illustration of the legal exposure created by an SPRS score that cannot be substantiated

Government Contracting

The Legal Risk of Misrepresenting SPRS Scores

CMMCDoD

An SPRS score you cannot substantiate is more than a compliance gap. It carries legal exposure that is rarely understood outside legal circles.

By Stuart Itkin

Read the article

Graphic marking the date CMMC took effect

Government Contracting

Happy CMMC Day

CMMCDoD

CMMC requirements can now be written into DoD contracts and solicitations. What that milestone means for the Defense Industrial Base.

By Stuart Itkin

Read the article

Illustration of defining a CMMC assessment scope boundary

CMMC

Scoping: The First Step on Your CMMC Journey

CMMC

Scoping decisions shape everything that follows. Draw the boundary carefully and the rest of the journey becomes far more predictable.

By the FutureFeed Explorers Series

Read the article

Illustration of responsibility shared between a service provider and a contractor

Cybersecurity

Mastering Responsibility Matrices

CMMCCybersecurity

CRMs and SRMs decide who owns which control. Unclear ownership is one of the most common reasons assessments come apart.

By Rachel Leidy

Read the article

Webinar Recap

Webinar

The Final CMMC Rule Explained: Key Takeaways

CMMCNIST 800-171

Takeaways from a joint webinar breaking down what the final rule changes, what it leaves alone, and where contractors should focus.

Read the article

Title card for the FutureFeed Explorers webinar episode on configuration items

Webinar

Explorers Series: Mastering Configuration Items

CybersecurityCMMC

Baseline configurations are not only good practice. You have to show the policy exists and that your organization enforces it.

By Rachel Leidy

Read the article

Compliance frameworks supported in the FutureFeed 6.0 release

Company News

Our Biggest Release of 2024: FutureFeed 6.0

CMMCNIST 800-171

Eighteen months of development, expanded framework support, and a broad set of platform improvements across the compliance workflow.

By Mark Berman

Read the article

Education

Company News

Advancing Compliance Education at FutureFeed

CMMC

An introduction from the Director of Compliance Education, and the plan for clearer, more practical guidance across the community.

By Rachel Leidy

Read the article

No articles in this topic yet. Try another filter.