DFARS and CMMC are two concepts you need to understand if you are part of the Defense Industrial Base in any capacity. But if you have difficulties making sense of the differences between them, don’t worry: in this post, you will find everything you need to know. CMMC: The Basics CMMC stands for Cybersecurity Maturity…
While Controlled Unclassified Information (CUI) tends to get all the attention, the Cybersecurity Maturity Model Certification (CMMC) also aims to protect Federal Contract Information (FCI). Read on to learn more about FCI and CUI, including their differences and how to safeguard them according to CMMC. What Is FCI? The term Federal Contract Information refers to…
Anyone who has ever used an online service such as email or social media is familiar with the term “multifactor authentication.” But is it required as part of the Cybersecurity Maturity Model Certification (CMMC)? In today’s post, we provide all the answers you need. What Is Multifactor Authentication? Multifactor authentication (or MFA for short) is…
As we have seen in previous posts, ITAR data cannot be shared with foreign nationals. But what about Controlled Unclassified Information (CUI), the main object of the Cybersecurity Maturity Model Certification (CMMC)? In today’s post, we discuss everything you need to know about CUI and foreign nationals. Keep reading to learn more. What Is Controlled…
You probably understand that FISMA is a piece of legislation that defines cybersecurity standards throughout the federal government. But what is FISMA, exactly, and ( what is its relationship with CMMC? Read on to discover the answers to these questions. About CMMC The Cybersecurity Maturity Model Certification is a framework developed by the Department of…
Defense contractors need to self-assess their compliance with NIST SP 800-171 into the Supply Performance Risk System (SPRS). However, some contractors experience difficulties gaining access to the system through the Procurement Integrated Enterprise Environment (PIIE). If that’s your case, we have good news: you can also submit your SPRS score via email. In today’s post,…
While Defense contractors have a lot of questions about the Cybersecurity Maturity Model Certification, “What CMMC level do I need?” Is at the top of the list. With that in mind, today we answer this question and provide some tips on how to achieve CMMC Compliance. How Many CMMC Levels Are There? Let’s start with…
As you try to make sense of the Cybersecurity Maturity Model Certification, you’ll come across all kinds of obscure technical terms. For example: What is FIPS-Validated Cryptography? What does it have to do with CMMC? Follow along to discover the answers. What Is FIPS? FIPS stands for Federal Information Processing Standards, a set of data…
Achieving compliance with the Cybersecurity Maturity Model Certification program can feel daunting, especially if you are a small business without the budget of a huge corporation. That’s why we’ve put together this quick CMMC guide designed with the needs of SMBs in mind. Here you’ll find everything you need to know explained in simple terms,…
The Cybersecurity Maturity Model Certification (CMMC) is a set of security standards that contractors must meet in order to work with the Department of Defense (DoD). Achieving CMMC Level 2 compliance can be a time-consuming and challenging process, but it is essential for companies that want to secure their position in the defense industry. In…