Etactics

APRIL 11, 2024

This blog discusses strategies for monitoring the effectiveness of security requirements. Continuous monitoring activities can provide better awareness of threats, vulnerabilities, and control effectiveness. AC-2 within NIST SP 800-53 states that authorization should occur before granting access.

Accountability 52

Accountability 52

Etactics

JUNE 27, 2023

If you work within the Defense Industrial Base (DIB), you’ve likely heard rumblings surrounding “CMMC”. Well, let’s start by defining that CMMC stands for the Cybersecurity Maturity Model Certification. CMMC is an assessment standard designed to ensure that defense contractors comply with current cybersecurity requirements.

Accountability 52

Accountability Integration 52

Etactics

JULY 12, 2022

It’s no wonder that cybersecurity frameworks have always included a training element for defending against social attacks, insider threats and misuse. The Cybersecurity Maturity Model Certification (CMMC) requirement for organizations working in the defense industrial base (DIB) is no different. via CMMC Level 2 Assessment Guide.

Accountability 52

Accountability Integration 52

Etactics

JULY 19, 2022

Now that we’ve reviewed the training requirements under the CMMC Level 1 practices, let’s discuss those found in Level 2. It’s important to remember that the CMMC Levels are cumulative. All employees should take the CMMC Level 1 training but that may not be the case for CMMC Level 2.

Accountability 72

Accountability 72

Etactics

AUGUST 22, 2023

In this blog, we look at two of their well known special publications (SP) and discuss: How to derive CMMC Strategies from the RMF NIST SP 800-53 Explained NIST SP 800-171 Explained Conclusion How to derive CMMC Strategies from the RMF This blog will explain the role SP 800-53 plays within the Risk Management Framework (RMF).

Integration 52

Integration Accountability 52

Etactics

JANUARY 4, 2022

Of course, what I’m referring to is the Cybersecurity Maturity Model Certification (CMMC). Maybe you’re already familiar with the acronym and heard that the DoD recently pushed out the massive update, CMMC 2.0. If the DoD hasn’t finalized CMMC yet, is it even worth putting energy towards figuring it out right now? The CMMC 2.0

Integration 52

Integration Regulations Accountability 52