Requirements POA&M’able Under 32 CFR 170 (CMMC v. 2.13)
We've created a simple table that shows the NIST SP 800-171 / CMMC Level 2 requirements that can be POA&M'ed while still…
READ MORE
CUI Monsters Invade CUI-CON!
CUI Monsters Invade CUI-CON!! Click through for raffle and other details.
READ MORE
What’s in a name (of a CMMC assessment)?
What is an “assessment” when it comes to CMMC? It turns out that there are several different types of assessments. In this…
READ MORE
CMMC Regulations Move Closer to “Final”
DoD submitted 32 CFR 170 to OIRA for review on June 27, 2024, meaning the Final Rule could be published before the…
READ MORE
Subcontractor Questionnaire – Discussion Draft
We are excited to release a discussion draft of our new CUI Recipient Preparedness questionnaire. The questionnaire helps organizations who want to…
READ MORE
Leveraging NIST SP 800-171 Attestation Letters from FedRAMP 3PAOs and CyberAB C3PAOs
Some DoD contractors are making significant investments to enhance their cybersecurity. This article discusses an approach those contractors can use to help…
READ MORE
DFARS 252.204-7024 Announcement
DoD Adding New Arrows to Contracting Officers’ Quivers (via SPRS)
DoD published a notice that DFARS 252.204-7024 will soon be published. This new clause requires contracting officers to consider supply chain risk…
READ MORE
DoD Seeking to Make SPRS Scores Count
DoD is amending the DFARS to add SPRS score values (rather than simply the submission of a self-assessment score to SPRS) as…
READ MORE
FAR and Above and SPRS Scoring Tool Downloaded Over 11,000 Times! New Update Available!
Our automated SPRS and FAR and Above scoring tool has been downloaded over 11,000 times since the first version was released in…
READ MORE
Pentagon’s Joint Surveillance Program in Full Swing
The United States Department of Defense (“DoD”) has begun its “Joint Surveillance Program” in conjunction with the CyberAB, the organization tasked with…
READ MORE