Etactics

MARCH 27, 2024

While working with CUI, you must have the proper cybersecurity safeguards and measures in place. A good example of this is through the Cybersecurity Maturity Model Certification (CMMC) program. Did you know that the DoD is migrating to using only the CMMC framework? So who exactly needs to abide by these regulations?

Regulations 52

Regulations Integration 52

Etactics

MARCH 19, 2024

The Cybersecurity Maturity Model Certification (CMMC) program protects federal information from unauthorized disclosure. Organizations will either self-assess or undergo a third party assessment of security requirements. This blog focuses on how organizations define those boundaries. What is an authorization boundary?

59

59

Etactics

AUGUST 22, 2023

The National Institute for Standards and Technology (NIST) publishes pioneering cybersecurity standards. NIST SP 800-53 is a catalog of security controls used in the risk management framework (RMF). Image Source: NIST SP 800-53 Assessment NIST SP 800-53A facilitates control assessments.

Integration 52

Integration Accountability 52

Etactics

NOVEMBER 9, 2021

On November 4, 2021, the Acquisition and Sustainment Office of the Under Secretary of Defense (OUSD A&S) announced a new strategic direction for the Cybersecurity Maturity Model Certification (CMMC) framework. This blog will assess these changes and discuss their impacts. Like the title of this blog post says, CMMC 2.0

52

52

Etactics

JUNE 28, 2022

Since our Town Hall blogs summarize the latest news from the leading CMMC authorities, here were our key takeaways from this presentation: Only controls with a value of 1 point are allowable on a POA&M during certification. Consider voluntary assessments high assurance today and valid for 3-4 years.

Integration 52

Integration 52

Etactics

DECEMBER 9, 2021

Table of Contents Town Hall Overview Credits for Exam Vouchers C3PAO Assessment Vouchers Renewals On Proposed Changes in CMMC 2.0 It leads up to the news of the Department of Defense (DoD) releasing the guidance and documentation on the CMMC assessment scoping. the CMMC-AB planned to charge C3PAOs for each assessment.

Accountability 52

Accountability Integration 52

Etactics

SEPTEMBER 21, 2023

The Cybersecurity Maturity Model Certification (CMMC) will introduce third-party verification of cybersecurity requirements. Organizations may turn to governance, risk, and compliance (GRC) applications to organize artifacts. A few years ago, a blog summarized the requirements for CMMC-focused GRC applications.

Accountability 52

Accountability Prevention 52