The Cybersecurity Maturity Model Certification (CMMC) Draft Version 0.6 is live and available here. Draft version 0.6 includes CMMC Levels 1 – 3. Of note, “CMMC Levels 4-5 are not included in this release because public comments are still being…
As readers of this blog undoubtedly know, the Bureau of Industry and Security (BIS) is the U.S. government agency responsible for regulating the export of sensitive technology. This is including items related to national security and nuclear proliferation. Companies violating…
Learn About the Federal Government’s New Disruptive Technology Strike Force: Export laws exist to regulate the export of certain goods and technologies. These include many sensitive and/or strategic items including military hardware and advanced technology, information, and software. Failure to…
Federal contractors may need a variety of software applications to support their operations, but studies show that, generally, the following six applications are some of the most critical solutions used among them: #1 Compliance Management Software: Federal contractors must comply…
There have been discussions among Department of Defense (DoD) contractors about their top five most important issues. From these discussions, they have identified four issues that are universally applicable to most, if not all, businesses and a fifth that is…
Is the Cloud Service Provider (CSP) you have partnered with, for securely storing and working with Controlled Unclassified Information (CUI), required to be FedRAMP authorized or approved? Well, there is no need to guess the answer to this question, as…
Periodically, here at RegDOX, we find it useful to take a step back from the security issues and events of the day and make sure that we are planning appropriately for the latest federal cybersecurity trends. So, here is today’s…
According to a joint alert from the US government's Cybersecurity and Infrastructure Security Agency (CISA), the NSA, and the FBI, a cyber-attack was committed against a U.S. Military Contractor by spies within their enterprise network. The intruders were able to…
In a June 30, 2022, internal memorandum that was made public three weeks later, Matthew S. Axelrod, the U.S. Department of Commerce’s Assistant Secretary for Export Enforcement told the department’s export enforcement employees to toughen up when investigating and penalizing…
Cybersecurity compliance is not only required, but heavily enforced. Aerojet Rocketdyne falsely represented their compliance with multiple cybersecurity regulations. A suit was filed based on this information by a whistleblower in 2015. 7 years, and many hefty legal fees later,…