Failing to make a decision is actually a decision in itself. It’s called the Cost of Doing Nothing (CODN). See how the CODN can impact your organization in our latest video. MathCraft’s products provide industrial security professionals with […]
Video: The Cost of Doing Nothing Read More »
In a classic case of following the letter of the law but not the spirit, contractors have long followed the “checkbox approach” to security compliance, running through a long list of controls and technical requirements to stay on top of
FSO Tip of the Month: Risk-Based Compliance Techniques Read More »
Data privacy has been a hot topic for some time, and this year it’s all coming to fruition. The California Consumer Protection Act (CCPA) went into effect at the beginning of this month, impacting businesses with a web presence throughout the U.S.
Personally Identifiable Information (PII): What It is and How to Protect It Read More »
In the past year, vendors providing technology to government organizations and contractors have fallen under scrutiny. In May, President Trump signed executive order (EO) 13873, which bans organizations in the U.S from using products produced by companies considered a “national security threat”.
Choosing Better Vendors: How NIST RMF Can Help You Manage IT Risks Read More »
October is the scariest month of the year, but not because of Halloween. While the rest of the nation prepares for trick-or-treaters, during October the government observes National Cybersecurity Awareness Month (NCAM) to remind agencies of the scariest danger facing Americans today:
The State of Federal Security: What Contractors Should Know During Cybersecurity Month Read More »
Staying NISPOM compliant has always been difficult – but when SEAD 3 went into effect in 2017, the standard for security became more than just compliance. Now, organizations must play an active role in monitoring themselves, their employees, colleagues, and associates.
How Portal Commander is Readying Organizations for the Future of Compliance Read More »
In accordance with Executive Order 12829, the Defense Security Service (DSS) administers and implements the defense portion of the National Industrial Security Program (NISP). To this end, it publishes the DSS Assessment and Authorization Process Manual (DAAPM) providing a comprehensive
DSS Risk Assessment: Terminology Defined and Steps Explained Read More »
By October 1st of 2019, the Office of Personnel Management (OPM) will be dissolved with its various functions transferring to other U.S agencies, thanks to an executive order signed by the President in April. While some have found the move perplexing (“out
NBIB to Merge with DoD – Will the Security Backlog Finally Disappear? Read More »
In many ways, the worst thing that can happen for cybersecurity in the public sector is an interruption of operations. During the 35 day shutdown of the U.S government which occurred between December 22, 2018 and January 25th of this year, massive furloughs left
How Automation Can Keep Cybersecurity Alive During a Shutdown Read More »
The National Industrial Security Program Operating Manual (NISPOM) defines security standards that must be followed by U.S organizations (government and corporate) with access to classified information. Among other things, the NISPOM provides guidelines to: • Ensure proper clearance for access
Seamless NISPOM Compliance with Access Commander and Deltek Products Read More »
