The Cybersecurity Maturity Model Certification (CMMC) is a set of cybersecurity practices and processes that organizations must follow to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). If a company wants to do business with the U.S. Department…

In our discussions with prospects, we have learned four main reasons as to why companies often prefer something other than Microsoft's GCC High. Specifically, when it comes to CMMC compliance. The first is subjective. The other three should give anyone…

Further: Do All Online CUI Storage and Collaboration Companies Have This Feature? NIST SP 800-171 requires storage backup as part of its security requirements for protecting Controlled Unclassified Information (CUI) in nonfederal information systems and organizations. Specifically, NIST SP 800-171…

In the past several days, another company, Point32Health (the parent company of healthcare insurers Harvard Pilgrim Health Care and Tufts Health Plan) was hit with a ransomware attack.  Again, we see a firm suffering reputational damage control and an evident…

Email is a common form of communication. Most of us use it daily. However, the frequency of use can lead to complacency. Instead, we should continually remind ourselves that it is also a common target for scams, phishing attacks, and…

According to the National Archives, Controlled Unclassified Information (CUI) is "information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies but is not classified" by executive order or statute. But how are…

Upon first impression, distinguishing Controlled Unclassified Information (CUI) from Classified Information is straightforward. For example, part 2002 of the Code of Federal Regulations defines CUI as "[i]nformation that is not classified, but is sensitive and requires safeguarding and dissemination controls…

Building a compliance program that meets the standards set by the National Institute of Standards and Technology (NIST) can be a complex process. Here are some of the critical steps you can take to ensure that your program complies:  …

What should a company look for in a virtual data room solution that is required from its SaaS provider? How should benefits or features be prioritized? Are there any elements that truly make a difference? Over time, RegDOX Solutions has…

The International Traffic in Arms Regulations (ITAR) is a set of US government regulations that control the export of defense-related goods, services, and technologies. Exporters need to be aware of ITAR if they are involved in manufacturing, exporting, or importing…