CMMC at the Crossroads: What DIB Contractors Should Prepare for Next
For Defense Industrial Base (DIB) contractors, CMMC is no longer something that can be kept on the “future planning” list. It’s moving from a compliance conversation to a contract requirement as it is now a major part of how DoW contracts are awarded, renewed, and managed. The biggest change is simple: contractors need to be […]
AI is the New Thing, But Identity Management Still Demands a Focus on Fundamentals
Does the AI hype live up to the promise in IDM? There is an unprecedented amount of buzz and even more investment in AI that echoes historical tech bubbles (Dot-Com, Telecom, Crypto) in a way that should have us all reaching for a pinch of salt. Some researchers and industry experts are doing exactly […]
Florida’s HB 473: The Cybersecurity Incident Liability Act (2024)
By Richard Hawes Last year we published a blog on Florida’s House Bill 473: The Cybersecurity Incident Liability Act. Less than two weeks later, on June 26, 2024, Governor Ron DeSantis vetoed HB 473, which promised private companies as well as state and local governments a legal shield against data breach lawsuits if they “substantially […]
Communicate to Build Relationships For Identity Success
Like many IT and security professionals, identity practitioners sometimes overlook customer-centric and nontechnical lessons, focusing instead on the technical aspects of our identity programs. We enjoy delving into the details of identity best practices, processes, and implementations, crafting these for our customers, and integrating them into our solution designs. While these elements are crucial, we […]
Unlocking Government Contracts: FedRAMP vs. CMMC 2.0
Navigating the path to selling your services to the U.S. government can be a complex journey, filled with a maze of regulations and acronyms. But fear not! In our previous discussions, we’ve demystified FedRAMP and CMMC, guiding you through the certification process. Recently, we’ve helped you learn about CMMC 2.0, which is set to fully […]
Turning User Password Management On Its Head
Resetting passwords is a required task for end users in any organization. Yet, it often comes with a host of challenges that lead to frustration and confusion. Here’s a closer look at some of the most prevalent challenges end users face when resetting their passwords that can leave them feeling like they’re navigating a labyrinth […]
Compliance With CMMC 2.0: Top 10 Questions Answered
By Sajid Shafique Sensitive data exfiltration from defense contractors is a major problem that threatens the national and economic security of the United States. Malicious cyber actors, often backed by Nation-state adversaries, continue to target organizations in the Defense Industrial Base (DIB) sector. To improve cybersecurity practices and protect sensitive information, the DoD has developed […]
Stay Secure on the Go: Essential Security Tips for Using Public Wi-Fi
By Hanno Ekdahl Wi-Fi networks have become ubiquitous, offering us the high-speed access we need to stay productive, entertained, and informed. The ability to connect to the internet almost everywhere has transformed the way we live and work. However, this convenience has a hidden danger: the risks associated with using public Wi-Fi networks. Whether at […]
Building a Culture of Cybersecurity with Strategies for Training and Awareness
Building a Culture of Cybersecurity: Strategies for Training and Awareness Written by TJ Rubeck In today’s rapidly evolving threat landscape, employees are often considered the weakest link in cybersecurity. Attackers often target human vulnerabilities through social engineering attacks, phishing, or other related threats. The increasing frequency and sophistication of cyber attacks have made one thing […]
Building Cyber Resilience
By Sandhya Sukumar Organization leaders worldwide are increasingly aware that one single cybersecurity solution does not exist to tackle today’s sophisticated and rapidly evolving cybercrimes. Even with strengthened defenses, threat actors can find weaknesses and vulnerabilities to infiltrate a company’s network and IT Infrastructure. Moreover, modern IT infrastructures are complex, interconnected ecosystems involving multiple organizations […]