Now it’s time to get serious. We’ve covered contract requirements, properly scoped your environment, and reviewed how to document your environment in a System Security Plan (SSP). Now we need to talk about the CMMC Practices and how to implement them. […]
Now that you understand your contract requirements and have properly scoped your environment, you are ready to document your environment in a System Security Plan (SSP). But just how much information do you need to include? How much SHOULD you include? […]
Now that you have understand your contract requirements, how do you properly scope your environment to meet the FARS/DFARS clauses? Some companies choose to start with their entire enterprise, while others attempt to limit the scope to certain servers and […]
