Who needs CMMC certification?… By 2026, most defense contractors conducting work for the DoD – other than those managing Commercial Off The Shelf (COTS) – will need to achieve CMMC certification. The level of certification you need will depend on the requirements spelled out in your contract. 3 MAIN OBJECTIVES: Companies that have a FAR…
Details
How To Become ITAR Compliant? Most people within the defense sector know about ITAR. However, not everyone knows how to become ITAR compliant. With that in mind, today we answer some key questions about this important set of regulations. What Is ITAR? ITAR (International Traffic in Arms Regulations) is a set of United States…
Details
Who Administers ITAR? When it comes to compliance, knowledge is power, and ITAR is no exception. For example, knowing who administers ITAR can help you better understand how this important compliance regime works. With that in mind, today we delve into the world of ITAR to understand who administers it and why it is essential.…
Details
CMMC: What Is the Principle of Least Privilege? The principle of least privilege is one of the cornerstones of most cybersecurity frameworks, and the Cybersecurity Maturity Model Certification (CMMC) is no exception. Keep reading to learn everything about the principle of least privilege: What it is, how to implement it, and what it means for…
Details
The release of the CMMC ruling has been release this morning December 22, 2023. Anticipation for this development has been building since 2020. It is important to note that while this is not the definitive final rule, it is a proposed final rule. The finalized version that can be incorporated into DoD contracts is…
Details
Knowing some instances of what constitutes an infraction to the International Traffic in Arms Regulations goes a long way towards understanding this important regulatory regime. With that in mind, today we review some examples of ITAR violations. Some are obvious, while others demonstrate how easily companies can incur potential ITAR violations if they don’t have…
Details
Many organizations looking to comply with the Cybersecurity Maturity Model Certification (CMMC) already observe other standards such as SOC 2. With that in mind, today we take a closer look at the similarities and differences between these two standards, including who needs to adhere to them and how to become certified. What Is CMMC? The…
Details
“Domain” is a term you come across often when researching the Cybersecurity Maturity Model Certification (CMMC). But what are CMMC domains, exactly? In today’s post, we tell you everything you need to know about this crucial component of the CMMC ecosystem. A Definition of CMMC Domains Cybersecurity Maturity Model Certification (CMMC) domains are groups or…
Details
As you set your Cybersecurity Maturity Model Certification goals, it is important to have a solid grasp of the different compliance tiers available. For example, what is the difference between CMMC Level 1 and CMMC Level 2? In today’s blog post, we take a closer look. About CMMC The acronym CMMC stands for Cybersecurity Maturity…
Details
Regardless of the Cybersecurity Maturity Model Certification (CMMC) level you need to achieve, there are some practices you need to observe. One of these practices is AC.L1-3.1.1, Authorized Access Control. Keep reading to learn more. What Is AC.L1-3.1.1? Let’s start by making sense of the different components of the CMMC practice number: AC indicates that…
Details