It was an eye opener to find out the security of the world's most critical companies is more fragile than we thought due to the breach of a widely used identity management platform. Just recently there was a potential breach…
Today we ask the question every DIB company should have asked and answered for itself: "Do NIST SP 800-171, and therefore CMMC Levels 1, 2, and 3,[1] require complete and unconditional protection of CUI from ransomware?" The answer of course…
In a late January 2022 enforcement action against two export law malefactors, the Directorate of Defense Trade Control (DDTC) has once again demonstrated the cost of ITAR compliance is less than the cost of non-compliance. Not only is the ITAR…
Somewhat unusually, in less than a week, CISA added new entries to its Catalog of Known Exploited Vulnerabilities. One was added on Friday, February 11, 2022, and an additional nine were listed two business days later February 15, 2022. Following…
It’s been several weeks since we last updated our review of the latest vulnerabilities disclosed in the Catalog of Known Exploited Vulnerabilities maintained and periodically updated by the Cybersecurity & Infrastructure Security Agency (CISA). The last time we discussed the…
As it promised two weeks ago when it first announced the publication of a federal government’s Catalog of Known Exploited Vulnerabilities, CISA (Cybersecurity & Infrastructure Security Agency) has just updated the catalog by adding four new vulnerabilities. All of them…
Well, the reports were right. On November 3rd the federal government’s Cybersecurity and Infrastructure Agency (CISA) issued a directive prioritizing vulnerability management by federal civilian agencies and establishing remediation deadlines. This new directive is referenced as Binding Operational Directive 22-01…
Reports are that on Wednesday, November 3, 2021, Jen Easterly, who is the director of Cybersecurity and Infrastructure Security Agency within the Department of Homeland Security, will issue a directive imposing new federal government cybersecurity mandates. Here’s what we know…
The Department of Commerce’s Bureau of Industry and Security (BIS) today issued an interim rule on revised export controls pertaining to certain cybersecurity items and implementation of those controls. BIS requested comments addressing the impact of these controls on industry…
Following up on the July 28, 2021 cybersecurity memorandum by the President, the Department of Homeland Security (DHS) announced this week the results of a review of resources and practices by DHS’s Cybersecurity and Infrastructure Security Agency (CISA) and the…