John Nygard

𝗛𝗼𝘄 𝘁𝗼 𝗔𝗰𝗵𝗶𝗲𝘃𝗲 𝗖𝗠𝗠𝗖 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗕𝗲𝗳𝗼𝗿𝗲 𝘁𝗵𝗲 𝗗𝗲𝗮𝗱𝗹𝗶𝗻𝗲 With the CMMC compliance deadline approaching fast, defense contractors must act now to secure their place in the industry. Achieving compliance is not just about meeting requirements—it's about protecting your business from costly delays, lost contracts, and potential security breaches. At Intech Hawaii, we’re here to guide you through every step of the CMMC compliance journey. Steps to meet the deadline: ✅ Conduct a Gap Analysis: Identify where your current practices fall short of CMMC standards and prioritize necessary improvements. 🔧 Develop a Remediation Plan: Address gaps with a clear strategy and timeline to ensure your systems meet compliance requirements. 📊 Prepare for the C3PAO Assessment: Ensure that your documentation and systems are ready for third-party assessment with a strong System Security Plan (SSP) and complete remediation. 💡 Expert Guidance: Work with Intech Hawaii’s experienced compliance team to navigate the complexities of CMMC, ensuring you stay on track and meet all requirements before the deadline. Ensure your business stays competitive by securing DoD contracts. Partner with Intech Hawaii to fast-track your CMMC compliance, avoid delays, and safeguard your future success. 🔗 Get started with your CMMC compliance plan today: https://lnkd.in/gggYNEnN #CMMCCompliance #Cybersecurity #DoDContracts #IntechHawaii #RiskManagement

2

Another bad headline to share.... If you think social engineering was easy before, think of how the rise in AI technology will make this even more prevalent. Scary stuff. #localgovernment #comanagedit #cyberresiliency #businessemailcompromise https://lnkd.in/gEwnu7wH.

12

1 Comment

Egoless Programming #10: Critique code instead of people In 2001, Lamont Adams of TechRepublic chiseled what would become ten commandments of Gerald M. Weinberg’s timeless wisdom: Egoless Programming. Today we’re going to learn its tenth commandment: Critique code instead of people. This final commandment was added in 2006 by Brendon Chase in a rerun of Adams’ original article. I think it’s a great addition, as it compliments the second commandment: You are not your code. That commandment taught us to not take criticism of our code personally. This commandment reminds us to be kind to humans but not to the code. Let’s contrast some right and wrong ways to provide critique: YES: This code won’t scale. NO: You don’t understand scalability. I understand scalability, and I often intentionally write unscalable code. If it doesn’t need to scale (yet), why place my focus there? YES: This code doesn’t use library X correctly. NO: You don’t understand how to use library X. I can’t count the number of times I’ve mishandled a library, even one I’ve used hundreds of times and understand well. Show me what I missed, and help me use it correctly. YES: This code doesn’t handle an edge case. NO: You never remember to handle anything but the happy path. Chances are high that I simply missed it or forgot to handle it. Don’t make me feel worse by branding me as sloppy or forgetful. Just help me add the necessary guards. YES: This code doesn’t follow our team’s conventions. NO: You don’t write code like the rest of the team. Transform a moment of exclusion into one of education. Rather than shaming me for not fitting in, teach me why the convention I missed is important. No matter how hard you try, you can’t hurt the code’s feelings. So tear the code down and build me up.

1

If you’re a university, the first step in driving enrollment is making prospective students aware of your programs. Our AccessNav dynamic menu instantly turns the entire .edu enterprise into a traffic funnel, significantly increasing visits to critical academic program pages.

8

1 Comment

It is important to have a replacement schedule in place for your IT assets. 🖥️⏰ Waiting for equipment to fail usually results in longer downtime and more aggravation. 😫🔧 Every company should have a replacement schedule with an accompanying budget. 💼💸 Need help creating an IT budget? Check out this guide: https://hubs.li/Q02y6pHH0 #ITManagement #TechMaintenance #BusinessContinuity #ITBudgeting #TechTips #SmoothOperations #PreventDowntime #PlanAhead #BusinessEfficiency #Plus1Technology

1

Great article from @StateTech with practical advice for shoring up your cyber defenses. https://buff.ly/4f4baOD #OT #ICS #cybersecurity #StateTech #lokx #ScheneGroom

7

2024 CMMC SUMMIT If you're an A&D supplier, get ready or get left behind. Begin your DFARS to CMMC journey and consider using a tool such as PreVeil. Many actionable insights shared in today’s session…. #Aerospace #AnD #DigitalTransformation #CyberSecurity #CMMC #RAISEIT

9

Importance of Backup and DR for K-12 Education Backup and Disaster Recovery (DR) are crucial aspects for any organization, including K-12 educational institutions. Here are some reasons why they are important in the context of K-12: 1. Data Protection: K-12 institutions hold a significant amount of sensitive data, including student records, grades, and administrative information. Backing up this data ensures that in the event of data loss due to hardware failure, human error, or cyber attacks, the institution can recover vital information without disruption to teaching and learning. 2. Continuity of Learning: In today's digital age, many educational activities and resources are stored digitally. A robust backup and DR plan ensure that even if there is a disruption, such as a natural disaster or system failure, the institution can quickly restore access to educational materials and resources, minimizing downtime and ensuring continuity of learning for students. 3. Compliance Requirements: Educational institutions are often subject to regulations regarding data privacy and security, such as the Family Educational Rights and Privacy Act (FERPA) in the United States. Implementing proper backup and DR measures helps institutions comply with these regulations by safeguarding sensitive data and ensuring its availability when needed. 4. Protection Against Cyber Threats: Educational institutions, including K-12 schools, are increasingly targeted by cyber threats such as ransomware attacks. A comprehensive backup and DR strategy can mitigate the impact of such attacks by allowing institutions to restore data from a clean backup, reducing the likelihood of paying ransom and minimizing disruption to operations. 5. Preservation of Institutional Knowledge: K-12 institutions accumulate valuable institutional knowledge over time, including curriculum materials, teaching resources, and administrative documents. Regular backups help preserve this knowledge by ensuring that it is not lost due to unforeseen events. 6. Parent and Student Confidence: Parents and students expect educational institutions to safeguard their data and ensure uninterrupted access to educational resources. A well-implemented backup and DR plan instills confidence in stakeholders that the institution takes data protection and continuity of learning seriously. 7. Cost Savings: While investing in backup and DR solutions incurs upfront costs, the potential costs of data loss or prolonged downtime far outweigh these initial investments. By preventing data loss and minimizing downtime, backup and DR measures ultimately save K-12 institutions money in the long run. To learn how XeneX has been helping schools address their cyber security needs please visit us at www.xenexSOC.com or contact [email protected].

4

1 Comment

Q. So you're wondering how many horizontal alignment signs are group or isolated for the entire US? A. See below. Q. Want to know what the proportion is for your state or county? A. Speak to me for a FREE pdf report. See you next week in San Diego ATSIP | Association of Transportation Safety Information Professionals (ATSIP) #ableysafecurves #savelives #safesystem

2

𝗩𝗶𝘀𝘁𝗲𝗺 𝗦𝗼𝗹𝘂𝘁𝗶𝗼𝗻𝘀, 𝗜𝗻𝗰. - "Enhancing your business securely through innovation and technology." Vistem Solutions, Inc. is proud to be the exclusive IT Provider for Dispatch and DHA systems to the Ports of Long Beach and Los Angeles, other high-profile manufacturing and engineering networks, and healthcare companies demanding the highest level of service, security, and compliance. We want to help you enhance your business. Our team is continuously on the forefront of cybersecurity threats and solutions. Recently, we've conducted an in-depth analysis of Water Sigbin's infection routine leading to an XMRig Cryptominer. This investigation uncovers the multi-stage loading technique employed by Water Sigbin to deploy the PureCrypter loader and eventually the XMRIG crypto miner. Staying ahead of these threats allows us to protect your business and ensure your operations remain secure and compliant. #itprovider #security #compliance #vistemsolutions #MSSP #cybersecurity #innovation #technology #cryptominer #threatanalysis #businessprotection For more information or to enhance your business's security, contact us at [email protected].

3

𝗖𝗠𝗠𝗖 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲 𝗨𝗽𝗱𝗮𝘁𝗲! The Cybersecurity Maturity Model Certification (CMMC) is quickly becoming a non-negotiable requirement for defense contractors. With CMMC expected to be integrated into DoD contracts by early 2025, now is the time to prepare. Intech Hawaii is here to guide you through this critical process. Whether you're navigating the 110 controls of NIST 800-171 or preparing for a C3PAO assessment, our experts are ready to help you achieve CMMC compliance and secure your DoD contracts. Don’t wait—start your compliance journey today. 🔗Learn more about our CMMC Compliance services: https://lnkd.in/gggYNEnN #CMMCCompliance #Cybersecurity #DoDContracts #IntechHawaii

2

At BadgePass, Inc we call this problem Credential Overflow. It is the most common security issue we encounter in #accesscontrol installations and it happens anytime a facility has more active badges/credentials than active cardholders. What's the number one cause? When an employee leaves an organization and their record is not automatically deactivated in the access control system. The number two cause is lost or stolen badges not being automatically deactivated when new badges are provisioned. Easy to fix with an integrated identity and activity management system. 😉 #badgepass #credentialoverflow #security #NFL #idbadges

33

6 Comments