ACAS tenable vulnerability scanning featured

Government agencies and contractors in the supply chain face threats every single day. If you haven’t read the news lately, our national infrastructure and data systems face significant challenges in maintaining the security and integrity of their devices, applications and network resources. When agencies and contractors want to connect to any sensitive system, the Department of Defense requires that they utilize the Assured Compliance Assessment Solution (ACAS).

This suite of vulnerability scanning software provides passive and active search capabilities that promote high levels of network security and compliance while standardizing these tools for organizations no matter where they are at.

Audit Machine

What are the Three Levels of CMMC Certification?

Jul 15, 2021 Continuum GRC 0 Comment

The Cybersecurity Maturity Model Certification (CMMC) framework of regulations is a relatively new governing document that combines several cybersecurity and risk management requirements to streamline security and compliance for agencies and contractors in the Defense Industrial Base (DIB) supply chain.

Even though all DoD agencies do not yet require this framework, its roadmap suggests that it will become a requirement in the coming years.

Central to CMMC regulations are three security levels, each determining the data a contractor can manage in their systems. These levels are distinguished by an escalating series of requirements regarding an organization’s technical capabilities and abilities.

Awareness Continuum GRC

What is the Relationship Between CMMC and NIST 800-171?

Apr 22, 2021 Continuum GRC 0 Comment

CMMC, RMF, FedRAMP, NIST 800-171, NIST 800-53, DFARS… there are a lot of terms, documents and requirements are thrown around when it comes to federal and defense contracting. Many of these items overlap to help contractors guarantee compliance and security, but without a clear understanding of their relationships, it’s easy to lose sight of the forest due to the trees.

Here, we’ll cover some of the complications related to the upcoming CMMC migration for DoD contractors. This includes a comparison of CMMC against NIST 800-171 and DFARS, and what that means for contractors now and in the future.