In our first two CMMC Practice session we reviewed the Level 1 Practices within the Access Control (AC) Domain and the Level 2 Practices with a focus on network and device access. Next up we will continue our more in-depth […]
We will preempt our Level 2 Practices discussion for a review of the CMMC Final Rule. Key topics we will cover: Timing Changes to the Assessment POAMs What should you expect from your C3PAO. MSP/MSSP/ESP/CSP clarifications. Anything else you'd like […]
In our first CMMC Practice session we reviewed the Level 1 Practices within the Access Control (AC) Domain. Switching our CMMC practice focus from Federal Contract Information (FCI) to Controlled Unclassified Information (CUI), in this session we take a more […]
We heard you. This CCP class is designed for the data analysts, the network administrators, the security engineers, and all the implementors INSIDE the defense industrial base who have to make CMMC a reality for their organization. We have merged […]
We heard you. This CCP class is designed for the data analysts, the network administrators, the security engineers, and all the implementors INSIDE the defense industrial base who have to make CMMC a reality for their organization. We have merged […]
Now it's time to get serious. We've covered contract requirements, properly scoped your environment, and reviewed how to document your environment in a System Security Plan (SSP). Now we need to talk about the CMMC Practices and how to implement them. […]
Now that you understand your contract requirements and have properly scoped your environment, you are ready to document your environment in a System Security Plan (SSP). But just how much information do you need to include? How much SHOULD you include? […]
Now that you have understand your contract requirements, how do you properly scope your environment to meet the FARS/DFARS clauses? Some companies choose to start with their entire enterprise, while others attempt to limit the scope to certain servers and […]
The first step in preparing for your companies Cybersecurity Maturity Model Certification is understanding your contract, the requirements for protection of CUI, and pinpointing exactly what information you'll be storing, processing, or transmitting which is CUI. Mike Synder will go […]
