News and Information

The United States needs to establish a single baseline set of security requirements that must be in place to safeguard others’ sensitive…

DoD submitted 32 CFR 170 to OIRA for review on June 27, 2024, meaning the Final Rule could be published before the…

Deciding whether someone can receive CUI isn't as confusing as some make it out to be. Our flowchart illustrates just how straightforward…

Although the United States Department of Defense’s Cybersecurity Maturity Model Certification (“CMMC”) program was previously the subject of a regulatory review process…

Many government contractors are worried about identifying the CUI in their environment. In this article we’ll take a brief look at the…

We are excited to release a discussion draft of our new CUI Recipient Preparedness questionnaire. The questionnaire helps organizations who want to…

Some DoD contractors are making significant investments to enhance their cybersecurity. This article discusses an approach those contractors can use to help…

NIST released a discussion draft of SP 800-171 Rev 3 late last week. This article describes the impact that discussion draft will…

The recently published DFARS 252.204-7024 clause allows DoD contracting officers to consider a LOT of attributes when awarding contracts. But, as explored…

DoD published a notice that DFARS 252.204-7024 will soon be published. This new clause requires contracting officers to consider supply chain risk…

DoD is amending the DFARS to add SPRS score values (rather than simply the submission of a self-assessment score to SPRS) as…

Our automated SPRS and FAR and Above scoring tool has been downloaded over 11,000 times since the first version was released in…