Press | In the News | Blog

The accreditation body overseeing the Defense Department’s cybersecurity certification for prospective contractors is also authorized to provide certified companies with cybersecurity services, according to members of the group’s board of directors. “A continuous monitoring capability could provide benefits to …

CMMC has become one of the looming issues for defense contractors as the Pentagon looks to fortify, not only its own networks, but those of the defense industrial base. In this op-ed, Johann Dettweiler, director of operations at TalaTek, a risk management firm, offers a frequently asked questions on how business leaders should think about this program.

A recent ransomware attack on Canadian contractor Bird Construction has once again highlighted the need for cybersecurity measures in the industry. Canadian media reports late last month said that the Ontario-based government contracting company was the victim of an incident that resulted in the encryption of company

The Defense Department has been steadily working on its new unified standard, the Cybersecurity Maturity Model Certification (CMMC), and is expected to release a final version and a list of accrediting bodies in January. But while companies shouldn’t wait until things are finalized to prep for certification, many are stuck. “CMMC is going to be

Internal Revenue Service Publication 1075 (IRS 1075) provides guidance for US government agencies, agents, and contractors that access Federal Tax Information (FTI), to make sure they use policies, practices, controls, and safeguards to protect FTI confidentiality and integrity of FTI throughout its lifecycle. FTI consists of federal tax returns and return information, and may contain personally identifiable information (PII) such as the taxpayer’s identity, and the nature, source, or …

Membership to StateRAMP, a nonprofit organization that will offer cloud security verification services to state and local governments, opens next month. Modeled after the Federal Risk and Authorization Management Program (FedRAMP) and leveraging the National Institute of Standards and Technology’s (NIST) 800-53 controls, StateRAMP aims to bring standardization and efficiency to cloud service providers (CSPs) and agencies alike.

Every day brings with it the news of yet another company falling victim to a cyberattack. The costs the affected businesses face are enormous: lost critical data, stolen assets and damaged …