Etactics

MARCH 19, 2024

The Cybersecurity Maturity Model Certification (CMMC) program protects federal information from unauthorized disclosure. This blog focuses on how organizations define those boundaries. How do you define a CMMC Level 1 authorization boundary? How do you define a CMMC Level 2 authorization boundary?

59

59

Etactics

NOVEMBER 22, 2022

At the time of writing this blog, there are currently 29 CMMC 3rd Party Assessor Organizations (C3PAOs) listed in The Cyber AB Marketplace. The CMMC Compliance Journey. Kompleye’s decision to pursue CMMC accreditation had two driving factors. It resembled the recently released draft CMMC Assessment Process (CAP).

Accountability 59

Accountability 59

Etactics

NOVEMBER 1, 2022

Scoping is often overlooked when preparing for a cybersecurity maturity model certification (CMMC). The purpose of this blog is to provide a resource that documents how to tailor the 320 objectives within NIST SP 800-171A to the CMMC scope. Image Source: CMMC Self-Assessment Scope Level 2.

Regulations 52

Regulations 52

Etactics

MAY 12, 2022

A System Security Plan (SSP) defines the boundary of connected components that make up an information system and outlines how you implement security requirements. of NIST SP 800-171 requires non-federal organizations to develop, document and periodically update an SSP. Table of Contents Why do you need an SSP? Control 3.12.4

52

52

Etactics

SEPTEMBER 21, 2023

The Cybersecurity Maturity Model Certification (CMMC) will introduce third-party verification of cybersecurity requirements. A few years ago, a blog summarized the requirements for CMMC-focused GRC applications. Here is an awesome open-source CMMC applicability matrix. Let’s take requirement 3.5.3 CMMCGRCToolset_5_923.png

Accountability 52

Accountability Prevention 52

Etactics

JANUARY 18, 2022

Changing of The Guard December’s CMMC-AB Town Hall event ushered in a changing of the guard within the accreditation body's board of directors. Mr. Johnson was the first Chairman elected at the CMMC-AB in January 2021. via CMMC-AB. via CMMC Level 2 Scoping Guide. It categorizes assets into five groups.

Regulations 52

Regulations Prevention 52