Compliance Fatigue: Why Companies Hesitate to Invest in NIST SP 800-171 and the Cybersecurity Maturity Model Certification (CMMC)
In today’s rapidly evolving cybersecurity landscape, achieving compliance with regulatory frameworks such as the Cybersecurity Maturity Model Certification (CMMC) has become increasingly critical for organizations, particularly those engaged with the Department of Defense (DoD) and its supply chain. However, despite the pressing need for robust cybersecurity measures, many companies hesitate to invest in CMMC compliance. […]
Strengthening American Cybersecurity
Happy Monday and thanks for tuning in to this week’s segment of Mondays with Miranda! Last week, on March 15th, President Biden signed into law the new Strengthening American Cybersecurity Act, which includes new cybersecurity incident reporting mandates for operators of federal infrastructure and federal civilian agencies. Those affected agencies will now be required to […]
CMMC Third-Party Assessments
Happy Monday and Valentine’s Day! Thanks for tuning in to this week’s segment of Mondays with Miranda. Last week, Deputy DoD CIO David McKeown said that after further analysis, the DoD’s initial plan of “bifurcating” requirements for approximately 80,000 contractors that handle CUI, is no longer able to happen. They will now be requiring third-party […]
CMMC Program Changes – CMMC 2.0
Happy Monday, and thanks for tuning in to this week’s segment of Mondays with Miranda! Last week, the DoD announced major changes to the Cybersecurity Maturity Model Certification (CMMC) with the release of the CMMC 2.0 program. The goal of the new program is to simplify CMMC and strengthen the cybersecurity of the Defense Industrial […]
U.S. Department of Justice Launches Civil Cyber-Fraud Initiative
Happy Monday, and thanks for tuning in to this week’s segment of Mondays with Miranda! In recent news, Deputy Attorney General Lisa O. Monaco announced the launch of the Justice department’s Civil Cyber-Fraud Initiative. Monaco said last week, “We are announcing today that we will use our civil enforcement tools to pursue companies, those who […]
NIST Releases “Ransomware Profile” & Pentagon Reviews CMMC Program
Happy Monday, and thanks for tuning in to this week’s segment of Mondays with Miranda! In this week’s news, the National Institute of Standards and Technology (NIST) just released a new cybersecurity framework for ransomware risk management. The “Ransomware Profile” identifies actions that organizations can take to prevent, respond, and recover from ransomware events. NIST […]
Recent Ransomware Attack & New CMMC Member
Happy Tuesday, and thanks for tuning in to this week’s segment of Mondays with Miranda. I hope everyone had an awesome Independence Day weekend! Last week, about 1500 businesses were affected by the Kaseya ransomware attack. Although it has been said that only a small number of Kaseya’s direct customers were affected, many of those […]
CMMC AB Authorizes First Certified Third-Party Assessment Organization
Happy Monday, and thanks for tuning into this week’s segment of Mondays with Miranda! First things first, don’t forget to register for our webinar this week! On Wed, Jun 16th from 6:30 PM to 8:00 PM EDT, we will be discussing an effective way to “Bulletproof” your network and your reputation. All your questions on […]
President Releases Executive Order on Cybersecurity; CMMC-AB On Path to Approve First Assessor
Happy Monday, and thanks for tuning in to this week’s segment of Mondays with Miranda! Last week, President Biden released an executive order which focuses primarily on improving cybersecurity within the federal government. Essentially, the executive order states that software sold to the federal government will need to comply with strict standards within six months. […]
CMMC AB Appoints First CEO & Launches Industry Advisory Council
Happy Monday, and thanks for tuning into this week’s segment of Mondays with Miranda! In recent cybersecurity news, there have been reports of personal data being scraped from more than 500 million LinkedIn users and posted for sale online. This comes not too long after Facebook’s similar incident of personal data being leaked from more […]