Blog

The intent of this article is to generate a professional discussion on CMMC that will make its way to the DoD PMO to hopefully remediate several issues in future releases of that standard. This art … read more

At ComplianceForge, we field a lot of questions regarding NIST 800-171 compliance and the pending Cybersecurity Maturity Model Certification (CMMC). This article is something we made to help an … read more

The draft of NIST 800-171 rev2 was released today. Most importantly, there are no changes to the controls (e.g., basic and derived security requirements in chapter 3) from NIST 800-171 rev 1. Howev … read more

In late 2018, the Office of Management and Budget (OMB) released a memorandum that pertains to strengthening cybersecurity practices for High Value Assets (HVAs), which also includes privacy consid … read more

Most people do not regard their cybersecurity and privacy documentation as a proactive security measure. Documentation is oftentimes viewed as a passive effort that offers little protection to a co … read more