We use “the digital supply chain” regularly because enterprise and government businesses rely heavily on it. The relationships between vendors, cloud providers, software, and customers are so deeply intertwined that it’s impossible to avoid the big picture–that security is a complex activity that can span dozens of entities. 

A recently discovered flaw in the R programming language (which you may or may not have even heard of) has introduced a severe security threat and CVE designation that experts are patching. But how does a small problem in a programming environment threaten major tech companies like Google and Microsoft?

Read More

Streamline Compliance and Documentation with Continuum GRC AI

Automate reporting with machine learning and AI.

The Necessity of Accurate Reporting in Compliance

Documentation and reports are the end product and backbone of your compliance efforts. They are how your organization demonstrates compliance with relevant regulatory and governing bodies.

Read More

As organizations move up the CMMC maturity model, they do so for one reason: to prepare themselves better to protect against Advanced Persistent Threats (APTs). These threats are a significant problem in the defense supply chain, and as such, CMMC leans heavily on NIST 800-171 and 800-172 to address them. 

This article introduces how these documents, particularly Special Publication 800-172, address APTs.

Read More