Latest posts
- Podcast – CMMC Scoping with Climbing Mt CMMC
- Review of CMMC Registered Practitioner Training
- NCDMM one of first companies to get “110” JSVA
- How to become a CMMC assessor or auditor
- Top 5 misconceptions about building a CMMC Level 2 network
- CMMC Final Rule moves to OIRA review
- DoD estimates CMMC paperwork burden
- How to get a CMMC Audit or Assessment
- DFARS 252.204-7012 controls discussion for CMMC
- Policy templates and tools for CMMC and 800-171
- C3PAO Shopping Guide
- CMMC JSVA program – what you need to know
- When do you need a new assessment? What can change?
- What is “Certified” as the result of assessment??
- CISA Proposed Rule – Mandatory Reporting of Cyber Incidents
- CMMC assessment? Don’t let pride take you down
- How to submit a NIST SP 800-171 self assessment to SPRS
- FedRAMP “Equivalent” Memo released
- CMMC Level 2 Self-Assessment Analysis
- Webinar – CMMC Proposed Rule Review
- CMMC Rule links to text (with December 26 content)!
- Is GCC-High required to pass CMMC?
- How the secret sauce is made – one practice, one hour
- Joint Surveillance Assessment – what is it like?
- CMMC News – October 2023 – the DFARS Rule
- What does “monitor” mean in CMMC?
- Why so few Defense contractors are compliant
- Podcast – increasing the likelihood of passing CMMC assessments
- CMMC Breaking News – July 25, 2023
- 3.13.11 FIPS 140-2 Validated Cryptography
- 3.5.3 Multifactor Authentication
- What are Spot Checks for?
- 3.14.1 Identify, report, correct system flaws
- 3.11.1 Periodically assess the risk to organizational operations
- 3.11.2 Scan for Vulnerabilities
- 3.3.3 Review and Update Logged Events
- 3.3.4 Audit Logging Process Failure
- 3.3.5 Correlate Audit Processes
- C3PAO CMMC Level 2 Assessments
- CMMC Scoping for Level 2
- CMMC Scoping for Level 1
- 3.6.3 Test the Organizational Incident Response Capability
- 3.4.1 Establish / Maintain Baseline Configurations
- Excuses that won’t work for your CMMC assessment
- Top 10 “Other than satisfied” 800-171 requirements
- When is a FIPS Validated Module required?
- Lessons learned from two (three?) DIBCAC assessments
- CMMC Annual Compliance Tasks
- Trends in 800-171 reporting and SPRS scores
- MSPs and CMMC Compliance
- Are you ready for CMMC Assessment?
- CMMC Scope – are you ready for an assessment?
- CMMC, CUI, and Cloud Vendors – do you need FedRAMP?
- CMMC 2.0 Scoping Scenarios Analysis
- CMMC 2.0 is here – what changes in CMMC?
- Does CMMC enforce FedRAMP and other CUI protections?
- Defining authorized – a key concept in CMMC
- The underestimated .998’s – procedure requirements for CMMC
- CMMC News – July 2, 2021
- Is CMMC dead? Why the delays?
- C3PAO Authorization Levels Explained
- CMMC News – May 30, 2021
- CMMC News – April 24, 2021
- CMMC News – March 22, 2021
- DFARS 252.204-7012 – Part 1, CDI and Covered Info Systems
- System Security Plan for 800-171 and CMMC
- CMMC News – February 16, 2021
- CAICO and current state of CMMC training – Ben Tchoubineh (CMMC-AB)
- CMMC Assessment Part 3 – Interview with Jeff Dalton
- CMMC-AB Jeff Dalton – the CMMC Assessment Process – Part 2
- CMMC practice deep dives: SC.1.175
- CMMC Compliance FAQs – Organizations seeking certification
- CMMC News – January 23, 2021
- CMMC-AB Jeff Dalton – the CMMC Assessment Process – Part 1
- CMMC News – January 5, 2021
- CMMC Level 1 certification and preparation (how-to)
- CMMC Capabilities Discussion Home
- Conversations from LinkedIn
- CMMC-AB Regan Edens interview on DFARS, FedRAMP, and AB authority
- CMMC Level 3 Assessment Guide Webinar and Review
- CMMC-AB Jeff Dalton Interview #2 – C3PAOs, CAs, Instructors, Ethics
- Registered Practitioner Home
- CMMC Level 1 Assessment Guide and Review
- CMMC RM.2.142 Scan for vulnerabilities in organizational systems
- Answers about C3PAOs, Assessors, and other CMMC Professional questions
- Webinar on CMMC Level 1 by the Software Engineering Institute (CMU)
- CMMC News Rollup November 19 2020
- Where is the Easy Button for CMMC? Why MSPs may be the solution.
- CMMC News Rollup – October 25, 2020
- CMMC Basics – the Full Details
- Address 19 CMMC Practices with Cybersecurity Training
- CMMC ML.2.999 Developing an effective CMMC Policy
- Introducing the CMMC Kill Chain – Zero to full compliance
- CMMC Level 4 – Discussion on Process Maturity – ML.4.996
- CMMC News Rollup October 6, 2020
- DFARS 252.204-7012 or 252.204-7021 enforces NIST 800-171 and CMMC
- CMMC News Roundup September 28 2020
- CMMC News Roundup September 9 2020
- CMMC News Rollup – August 26, 2020
- When is a conformity assessment not a conformity assessment? (hint – it is CMMC)