With the more recent threats and attacks we’ve seen in both the Colonial Pipeline and SolarWinds hacks, the question of infrastructure security is firmly in the collective consciousness. With President Biden’s Executive Order focusing executive resources to beef up cybersecurity, the efforts of the government are turning towards addressing some of the gaps that have been around for the past few years. 

This reality calls for private contractors and any business with infrastructure-critical services in areas like energy, defense, financial services or other areas to take the right steps to address these issues. Fortunately, the NIST Framework for Improving Critical Infrastructure Cybersecurity provides a thorough risk assessment framework to help. 

Read More

Cloud and IT services in federal and defense markets are a booming business. The national infrastructure is turning to stable and flexible IT infrastructure to help mobilize the supply chain in a way that can meet modern security and domestic challenges. Accordingly, many businesses are turning to new certification frameworks like CMMC to support contracting in these areas. 

Here we’re talking about what it means to prepare for CMMC certification. Contrary to popular belief, there are steps you can take to prepare before you even meet with a professional auditor to help that partner better serve you and streamline your compliance process. 

Read More

ISO/IEC 27001 is widely known, providing requirements for an information security management system (ISMS), though there are more than a dozen standards in the ISO/IEC 27000 family. Using them enables organizations of any kind to manage the security of assets such as financial information, intellectual property, employee details or information entrusted by third parties.

Read More