Conducting a NIST 800-171 self-assessment — also known as a CMMC self-assessment or SPRS assessment — is a critical component of DFARS 252.204-7019 compliance. As a contractor, you’ll need to evaluate your organization against all 320 objectives and upload your score to the Supplier Performance Risk System (SPRS). In this guide, we’ll break down all […]
Risk assessments are an integral part of CMMC compliance and information security. Here’s what you need to know to be successful.
In the DIB world, not all CMMC assessments are created equally — especially when safeguarding our CUI Assets. Understanding the difference between Gap and Readiness Assessments isn’t just essential but can also be crucial. News Flash—Gap Assessments Are Not the Only Option Many believe that a Gap Assessment is the go-to for every situation. But […]
With the DoD’s new memo tightening FedRAMP requirements for cloud services, it may be time to develop a new approach.
In January 2024, NIST released critical updates to NIST 800-171 revision 3. Here’s everything you need to know to achieve compliance.
In 2023, the DIBCAC revealed the 10 most frequently failed NIST 800-171 requirements. Here are the common mistakes to avoid.
Disclaimer: NIST 800-171 Revision 3 is in DRAFT form, and public comments will be gathered before the publication is made final. 1. Resource Allocation = Time & Money Even though the total count of security requirements in the recently released draft of NIST 800-171 Rev. 3 remained steady with Rev. 2, the requirements were expanded […]
A law passed by Congress late last year allocated $1 billion in cybersecurity grants for state and local governments to improve their digital defenses.
Back in September, we wrote a blog about the Cybersecurity Maturity Model Certification (CMMC) program. In it, we explained how the Department of Defense introduced CMMC in 2019 to strengthen cybersecurity standards for Department of Defense (DoD) contractors. CMMC builds a set of cybersecurity requirements into acquisition programs. It’s designed to help provide the DoD with confirmation that firms within the Defense Industrial Base (DIB) are meeting those requirements. Why a Change from CMMC 1.0 to 2.0? […]