Conducting a CMMC 2.0 Readiness Assessment

The Cybersecurity Maturity Model Certification program gives the Defense Department a mechanism to verify the readiness of defense contractors both large and small to handle controlled unclassified information and federal contract information in accordance with federal regulations. The CMMC 2.0 program is currently in the final rulemaking phase with implementation expected in 2025. Large defense contractors […]
Accelerating CMMC 2.0 Compliance for Defense Contractors with Microsoft Azure

Microsoft Azure provides a suite of highly integrated security services that provide a cost-effective solution for Defense contractors looking to meet the CMMC 2.0 requirements. The Cybersecurity Maturity Model Certification (CMMC) is a framework designed to enhance the security posture of companies that work with the Department of Defense (DoD) by implementing a set of […]
Accelerating Cybersecurity for US Critical Infrastructure with FedRAMP

FedRAMP authorized commercial cloud services offer a ready-made cybersecurity accelerator for helping organizations in critical infrastructure sectors rapidly protect their IT assets.
Jan 2023 – FedRAMP, StateRAMP and CMMC 2.0 Roundup

The FedRAMP Marketplace continues to grow especially with the passage of the FedRAMP Act as part of the NDAA 2022.
Implementing Continuous Monitoring on AWS for FedRAMP, FISMA, and CMMC Compliance

Security and compliance-focused customers especially delivering services to Government organizations must comply with FedRAMP, FISMA, or CMMC requirements.
Leveraging FedRAMP Reciprocity for CMMC 2.0 Compliance Acceleration
The Cybersecurity Maturity Model Certification (CMMC) is a unified standard for implementing cybersecurity across the Defense Industrial Base (DIB), which includes over 300,000 companies in the supply chain.
Securing Kubernetes for Compliance with FedRAMP, FISMA, or CMMC Requirements

The EKS service will now be presented to the FedRAMP JAB for accreditation such that government and defense organizations can start leveraging this service.
Understanding FIPS 140-2 Crypto Requirements for Meeting FedRAMP and CMMC Compliance Standards
Federal Information Processing Standard (FIPS) FIPS 140-2 validated encryption is a prerequisite for FedRAMP and CMMC compliance and is governed by the FIPS 140-2 Publication, a U.S. government computer security standard used to approve cryptographic module.
Accelerating FedRAMP, FISMA or CMMC ATOs with a Cloud GSS

Organizations looking to comply with NIST SP 800-53 or NIST SP 800-171 security requirements for obtaining an Authority-To-Operate (ATO) for FedRAMP, FISMA
DOD releases CMMC draft that provides early guidance to DOD Contractors and appears to track FedRAMP Program

DOD contractors have been asked to implement NIST SP 800-171 to comply with DFARS 252.204-7012