To begin the ITAR/CMMC compliance journey, start with a successful readiness assessment by following these steps: Understand Compliance Requirements: Gain a thorough understanding of the compliance regulations and standards that apply to your organization, such as ITAR or CMMC.…
Acquiring a virtual data room for ITAR (International Traffic in Arms Regulations) or CMMC (Cybersecurity Maturity Model Certification) compliance depends on several factors. Here are five areas of consideration in determining the best time for an acquisition: Compliance Requirements:…
As a notable predecessor of the wildly popular Among Us video game, The Town of Salem is a popular online role-playing game where players take on different roles in a fictional town and try to find out who among them…
The DDTC announced on Tuesday, May 31, 2023, a settlement agreement with VTA Telecom Corporation (VTA), based in Milpitas, CA. Let's use this example to illustrate the goals and provisions of such a settlement. When the State Department’s Bureau of…
We at RegDOX feel much sympathy, although admittedly mild frustration, when we learn of the export law enforcement actions by the State Department. Such actions that result in millions of dollars of fines followed by periods of intensive government internal…
The Cybersecurity Maturity Model Certification (CMMC) is a set of cybersecurity practices and processes that organizations must follow to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). If a company wants to do business with the U.S. Department…
In our discussions with prospects, we have learned four main reasons as to why companies often prefer something other than Microsoft's GCC High. Specifically, when it comes to CMMC compliance. The first is subjective. The other three should give anyone…
Further: Do All Online CUI Storage and Collaboration Companies Have This Feature? NIST SP 800-171 requires storage backup as part of its security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal information systems and organizations. Specifically, NIST SP 800-171…
In the past several days, another company, Point32Health (the parent company of healthcare insurers Harvard Pilgrim Health Care and Tufts Health Plan) was hit with a ransomware attack. Again, we see a firm suffering reputational damage control and an evident…
Email is a common form of communication. Most of us use it daily. However, the frequency of use can lead to complacency. Instead, we should continually remind ourselves that it is also a common target for scams, phishing attacks, and…