With all the shifts in cybersecurity, one framework has been steadily solidifying requirements and expectations: CMMC. With the revision of CMMC 2.0 and the following feedback from vendors and the industry, it has been a years-long process to get this framework in place. Now, contractors in the DIB are seeing that framework become concrete requirements. 

With the October and November deadlines approaching, organizations in the DoD supply chain must understand what’s coming and what they should do. 

Read More

Across CMMC certification and ongoing monitoring and assessment, the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) plays a pivotal role in verifying contractor compliance. Here, we will cover the relationship between DIBCAC and CMMC assessments, providing expert-level guidance for organizations seeking Level 2 or Level 3 certification.

Read More

CMMC is a complex undertaking. Depending on where you are in your certification journey, you could require consulting, assessment, or both. Fortunately, the CMMC program includes training and authorization for two distinct types of organizations: Registered Provider Organizations (RPOs) and Certified Third-Party Assessment Organizations (C3PAOs), each offering different services. 

We’re discussing these organizations and which one you might want to engage with when preparing for CMMC certification. 

Read More