Charles Herring

🔐 𝗠𝗮𝘀𝘁𝗲𝗿𝗶𝗻𝗴 𝗖𝗠𝗠𝗖: 𝗧𝗵𝗲 𝗞𝗲𝘆 𝘁𝗼 𝗗𝗼𝗗 𝗖𝗼𝗻𝘁𝗿𝗮𝗰𝘁 𝗦𝘂𝗰𝗰𝗲𝘀𝘀 As the Department of Defense tightens cybersecurity requirements, contractors must achieve CMMC certification to protect Controlled Unclassified Information (CUI) and access DoD opportunities. Our blog provides a roadmap for compliance, from understanding certification levels to implementing NIST SP 800-171 controls. Read more: https://cstu.io/055781 #CMMC #Cybersecurity #Compliance #DefenseIndustry #DoDContracts

1

MAD Security has the ultimate guide to mastering Controlled Unclassified Information (CUI) compliance! 🔗 https://hubs.la/Q02WHcGC0 If you are a government contractor, understanding CUI is critical to protecting sensitive data and maintaining compliance. Our blog post dives deep into how to effectively analyze contracts and meet all your CUI handling requirements. Here's a glimpse of what you will find inside: 1. Spotting CUI Clauses: Become a pro at identifying crucial CUI references in contracts 2. Decoding Compliance: Clear guidance on navigating DFARS and NIST SP 800-171 3. Implementing Security Measures: Learn the best practices in encryption, access control, and auditing 4. Creating Compliance Checklists: Step-by-step instructions to streamline your CUI compliance 5. Expert Guidance: When and how to leverage legal and compliance experts to tackle tough challenges Read the full blog TODAY and stay ahead of the game! #MADSecurity #Cybersecurity #DFARSCompliance #GovernmentContracting #NISTSP800171

2

Business Email Compromise attacks are a top attack method, but there are measures that organizations of all sizes can take to thwart threat actors who utilize them. Arctic Wolf SVP of Security Services Mark Manglicmot explains here: https://ow.ly/m2uF50Sq2T1 #EndCyberRisk

26

CISA gives the first-year results of its pilot program to scan and notify organizations in the U.S. federal government, state, local, tribal, territorial governments, and critical infrastructure entities about ransomware vulnerabilities they detect. Check out how well it worked here: https://hubs.la/Q02zTKf30 #CISA #CyberSecurity #Infrastructure #Ransomware

15

Securing your identity infrastructure is mission-critical in keeping your organization safe from cyber threats. Arctic Wolf’s comprehensive approach to identity threat detection and response (ITDR) provides proactive protection for identity infrastructure with real-time detection and response for identity-based attacks. https://ow.ly/asKg50SOiUz #EndCyberRisk

22

Matt Gilbert is diving into one of the big changes in the new CMMC rules: a Unique Identifier (UID) for systems handling CUI. Once certified, this UID tracks compliance, but what happens if you switch things up, like moving to a new cloud provider? Matt answers questions like these and more in our office hours session—sign up now to stay in the know! https://lnkd.in/gm5_YPGy #CMMC #Cybersecurity #Compliance

3

🚨 Breaking News: CMMC Final Rule Published! 🚨 The Department of Defense has just released the final program rule for the Cybersecurity Maturity Model Certification (CMMC) Program. This is a game-changer for defense contractors and the entire DIB ecosystem. Key takeaways: 🔐 3 simplified assessment levels 🤝 Streamlined process for SMBs 📊 Alignment with FAR 52.204-21 and NIST SP 800-171 Rev 2 and -172 ⏳ 180-day conditional certification with POA&Ms ☁️ Cloud service offerings allowed for compliance What does this mean for your business? How can you prepare for the upcoming DFARS rule change in 2025? 🔍 Dive deeper into the implications of this announcement and learn how to achieve 32 CFR compliance for CMMC by checking out this video of our VP of Corporate Marketing and Research Patrick Spencer. Don’t put your business with the DIB at risk. Accelerate your CMMC 2.0 compliance with the help of Kiteworks! #CMMC #Cybersecurity #DIB #DefenseContractors #ComplianceSolutions #32CFR Patrick Spencer

55

30 Comments

The latest update for #Tripwire includes "Closing the Skills Gap for Women in #Cybersecurity" and "Making Data Integrity Easy: Simplifying #NIST CSF with Tripwire". #infosec #threatdetection https://lnkd.in/eHY3WvQ

1

‼️ Controlled Unclassified Information (CUI) Is your IT system set up correctly to meet the compliance criteria for CUI? Avoid failing the CMMC requirement and losing the DoD Contract. https://lnkd.in/g-ZMf-ZP #CUI #controlledunclassifiedinformation #IT #compliance #criteria #DoD #contract

2

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

Don't let the momentum fade after your tabletop exercise! Tim R., senior director of threat operations, says creating a solid project plan to track and implement adjustments to your IR plan will help ensure you get the most value out of the exercise. Watch a replay of our recent webinar, "Transforming Your Tabletop Exercises" to get tips for setting up and running your tabletop exercises: https://hubs.ly/Q02tPKgX0

13

1 Comment

🔍 Industry Insight: Navigating the Compliance Maze Presented by Forescout Technologies Inc. & Carahsoft Mike Walsh, President at Forescout Technologies Inc. Government Systems, discusses the "Comply to Connect" program, a DoD initiative aimed at enhancing cybersecurity across millions of endpoints within the Department of Defense's infrastructure. Currently managing around 4 million licensed endpoints, the program is a key component of the Zero Trust framework, focusing on collecting extensive device information. More: https://lnkd.in/ezqF-v5G #FedGovToday #IndustryInsight #ForescoutTechnologies #CyberSecurity #ZeroTrust #OperationalTechnology #CyberDefense #DoD

5

Miss yesterday's webcast on CMMC 2.0 and how to mark documents containing CUI? Watch it at your convenience, on demand: https://buff.ly/4dB5SJ3

12