CMMC, NIST 800-172, and Advanced Persistent Threats

GRC compliance image - Continuum GRC solutions for cyber security and audit AI-powered cybersecurity 2025 zero trust ransomware protection supply chain security regulatory compliance operational resilience

As organizations move up the CMMC maturity model, they do so for one reason: to prepare themselves better to protect against Advanced Persistent Threats (APTs). These threats are a significant problem in the defense supply chain, and as such, CMMC leans heavily on NIST 800-171 and 800-172 to address them. 

This article introduces how these documents, particularly Special Publication 800-172, address APTs.

 

Read More

Security, Compliance, and the Decline of Third-Party Cookies

Featured GRC blog image - top trends in cybersecurity and risk management for 2025 AI-powered cybersecurity 2025 zero trust ransomware protection supply chain security regulatory compliance operational resilience

The issue of cookies and user tracking has long been an issue, but the importance of these marketing and development tools has kept them a vital part of our web experiences. However, Google announced that its popular Chrome browser would no longer support third-party cookies, and in January 2024, they began rolling out anti-cookie technology

This has significantly impacted businesses managing compliance with regulations, primarily with GDPR privacy requirements. Here, we’ll discuss why cookies have special consideration under GDPR rules and how businesses can address these issues. 

 

Read More