Blog

NIST released the final version of NIST SP 800-53B that identifies what NIST SP 800-53 R5 controls fall into low, moderate, high and privacy baselines. This allowed ComplianceForge to release new v … read more

Story Time - Using Documentation To Tell Your CMMC Compliance StoryIf you are looking at a future CMMC assessment, there is a good chance that you have asked yourself what the critical component to a … read more

The concept of creating a “CMMC Kill Chain” started off as a bit of a dare… kind of a “Here! Hold my coffee!” moment among a small group of CMMC practitioners to create a proof of concept for an effic … read more

This episode of Coffee Thoughts With Tom addresses CMMC as a conformity assessment, since conformity assessments are intended to use a risk-based approach to determine a confidence point (e.g., materi … read more

This article is about words having meaning, since the basis of Governance, Risk Management and Compliance (GRC) efforts is to identify and govern both technical and non-technical requirements that … read more