In the past several days, another company, Point32Health (the parent company of healthcare insurers Harvard Pilgrim Health Care and Tufts Health Plan) was hit with a ransomware attack. Again, we see a firm suffering reputational damage control and an evident…
Email is a common form of communication. Most of us use it daily. However, the frequency of use can lead to complacency. Instead, we should continually remind ourselves that it is also a common target for scams, phishing attacks, and…
According to the National Archives, Controlled Unclassified Information (CUI) is "information that requires safeguarding or dissemination controls pursuant to and consistent with applicable law, regulations, and government-wide policies but is not classified" by executive order or statute. But how are…
Upon first impression, distinguishing Controlled Unclassified Information (CUI) from Classified Information is straightforward. For example, part 2002 of the Code of Federal Regulations defines CUI as "[i]nformation that is not classified, but is sensitive and requires safeguarding and dissemination controls…
Building a compliance program that meets the standards set by the National Institute of Standards and Technology (NIST) can be a complex process. Here are some of the critical steps you can take to ensure that your program complies: …
What should a company look for in a virtual data room solution that is required from its SaaS provider? How should benefits or features be prioritized? Are there any elements that truly make a difference? Over time, RegDOX Solutions has…
The International Traffic in Arms Regulations (ITAR) is a set of US government regulations that control the export of defense-related goods, services, and technologies. Exporters need to be aware of ITAR if they are involved in manufacturing, exporting, or importing…
The Cybersecurity Maturity Model Certification (CMMC) Draft Version 0.6 is live and available here. Draft version 0.6 includes CMMC Levels 1 – 3. Of note, “CMMC Levels 4-5 are not included in this release because public comments are still being…
As readers of this blog undoubtedly know, the Bureau of Industry and Security (BIS) is the U.S. government agency responsible for regulating the export of sensitive technology. This is including items related to national security and nuclear proliferation. Companies violating…
Learn About the Federal Government’s New Disruptive Technology Strike Force: Export laws exist to regulate the export of certain goods and technologies. These include many sensitive and/or strategic items including military hardware and advanced technology, information, and software. Failure to…