On October 15, 2024, the Department of Defense (DoD) published the final rule for the Cybersecurity Maturity Model Certification (CMMC) Program that not only finalizes the long-anticipated CMMC Rule but also foreshadows what...more
11/15/2024
/ Certification Requirements ,
Comment Period ,
Compliance ,
Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Defense Contracts ,
Defense Sector ,
Department of Defense (DOD) ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
FedRAMP ,
NIST ,
Proposed Rules ,
Subcontractors
On August 22, 2024, the United States intervened in a whistleblower suit against the Georgia Institute of Technology, initially filed by current and former members of Georgia Tech’s cybersecurity team, alleging that Georgia...more
9/26/2024
/ Compliance ,
Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Data Security ,
Department of Defense (DOD) ,
Department of Education ,
Educational Institutions ,
False Claims Act (FCA) ,
Federal Contractors ,
Information Systems Security Program (ISSP) ,
Misrepresentation ,
NIST ,
Proposed Rules ,
Risk Assessment ,
Risk Mitigation ,
Security and Privacy Controls ,
Whistleblowers
Cybersecurity Maturity Model Certification (CMMC) is coming — and now appears to be coming faster than many defense contractors believed. In the latest signal of CMMC’s forward momentum, the Department of Defense (DoD) issued...more
9/11/2024
/ Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Defense Contracts ,
Defense Sector ,
Department of Defense (DOD) ,
DFARS ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
NIST ,
Prime Contractor ,
Proposed Rules ,
Subcontractors
To dramatically scale up the Modernizing the Federal Risk and Authorization Management Program (FedRAMP) marketplace, the Office of Management and Budget (OMB) has completely rewritten FedRAMP’s vision, scope and governance...more
8/13/2024
/ Cloud Computing ,
Cybersecurity ,
Department of Defense (DOD) ,
Digital Marketplace ,
Federal Contractors ,
FedRAMP ,
IaaS ,
Information Technology ,
New Guidance ,
OMB ,
PaaS ,
Risk Management
In our recent article, we discussed FedRAMP’s Roadmap to the Future, outlining FedRAMP’s ambitious plan to breathe new life into the FedRAMP program by, among other goals, updating the authorization process and automating key...more
There were no signs of slowing down as FedRAMP announced its ambitious plan to make significant changes over the next two years.
During a recent public forum, FedRAMP discussed the planned changes to its program to...more