News and Information

2022 saw a lot of changes to the CMMC program, and even to the government’s approach to supply chain cybersecurity. In this…

2023 is shaping up to be a HUGE year for the CMMC program! DoD closed out 2023 by kicking off the “Joint…

The United States Department of Defense (“DoD”) has begun its “Joint Surveillance Program” in conjunction with the CyberAB, the organization tasked with…

The CMMC Implementation Conference is being held January 18-20 at the beautiful University of San Diego. Chock full of valuable tips and…

There is a LOT of confusion in the contractor community over whether contractors have the authority to take it upon themselves to…

Is a contractor's system security plan ("SSP") Controlled Unclassified Information ("CUI")? The answer depends on who is asking the question.

The DoD Assessment Methodology is a great attempt to create a standardized approach to evaluating contractor cybersecurity programs. However, it suffers from…

Deciding when to hire an expert to help with cyber compliance can be daunting. We have updated our Comprehensive NIST SP 800-171…

Announcing the 2022 CMMC Community Contributor Awardees! These individuals made exceptional contributions to the efforts to protect the US government’s supply chain,…

Twenty questions service providers should ask their clients before entering into a CMMC engagement.

We are excited to announce the release of the new version of our CMMC 2.0/NIST SP 800-171 Self-Assessment Tool. This version includes…

The FAR and Above Program provides a risk-based, phased approach to achieving the requirements in NIST SP 800-171.