Is FedRAMP Mandatory?

May 26, 2021 Continuum GRC 0 Comment

Cybersecurity is all over the news. With the SolarWinds and Colonial Pipelines hack, we’ve learned the hard way that critical infrastructure is something we cannot take for granted. That’s why it is so important that IT providers understand why compliance frameworks like FedRAMP are necessary.

Is FedRAMP compliance mandatory? Yes. If you provide cloud services to a federal agency, you must earn your FedRAMP ATO. However, instead of seeing this as another hoop to jump through, take the time to better understand why this is so critical for national security and how it can be a huge benefit to your company overall.

Awareness

What is NIST Framework for Improving Critical Infrastructure Cybersecurity?

May 19, 2021 Continuum GRC 0 Comment

With the more recent threats and attacks we’ve seen in both the Colonial Pipeline and SolarWinds hacks, the question of infrastructure security is firmly in the collective consciousness. With President Biden’s Executive Order focusing executive resources to beef up cybersecurity, the efforts of the government are turning towards addressing some of the gaps that have been around for the past few years.

This reality calls for private contractors and any business with infrastructure-critical services in areas like energy, defense, financial services or other areas to take the right steps to address these issues. Fortunately, the NIST Framework for Improving Critical Infrastructure Cybersecurity provides a thorough risk assessment framework to help.

Frameworks

Accelerate Your CMMC Certification

May 12, 2021 Continuum GRC 0 Comment

Cloud and IT services in federal and defense markets are a booming business. The national infrastructure is turning to stable and flexible IT infrastructure to help mobilize the supply chain in a way that can meet modern security and domestic challenges. Accordingly, many businesses are turning to new certification frameworks like CMMC to support contracting in these areas.

Here we’re talking about what it means to prepare for CMMC certification. Contrary to popular belief, there are steps you can take to prepare before you even meet with a professional auditor to help that partner better serve you and streamline your compliance process.