When considering RegDOX’s patented cloud solution for ITAR and DFARS compliant handling of federally defined Controlled Unclassified Information (CUI), many companies come to us with a series of questions that can be summarized in three general categories: What are the…
Lest anyone think that the DDTC is backing off from strongly enforcing the ITAR’s restrictions, $13 million in civil penalties was placed on Honeywell this past week, serving as a stark reminder to the exporting industry. The case involved alleged…
The International Traffic in Arms Regulation (ITAR) is an established authoritative and mandatory list of compliance guidelines. These guidelines are set by the State Department’s Directorate of Defense Trade Controls (DDTC). It is important that any company that exports products…
Note: This is unrelated to Microsoft’s announcement of security patches for other similar vulnerabilities on April 13, 2021. THERE ARE NO MORE RULES Today we are going to talk about what happens when you do not address security problems in…
There are five types of clouds: Cumulus, Cirrus, Stratus, and Nimbus. Oh, and that computer thing. You know “THE Cloud”. Or, as it is often referred to, the Clowd – a combination of the words Clown and Cloud. See what…
Well, it finally happened. Despite all your efforts in security awareness training and the latest in hardware and software technology, somehow something bad happened: You got breached. Do not freak out or feel too bad. Here's how to report to…
Step 1. Admit You Have A Problem. If you want to play with the big boys - or at least the Department of Defense (DoD) -you need to realize that there are going to be some rules and regulations that…
Today’s article in the Wall Street Journal titled Hacker Group Says It Accessed Tesla’s, Others’ Internal Video-Surveillance Feeds reminds us of the increasing cybersecurity risks to businesses of video conferencing. RegDOX’s whitepaper on CUI and the Risk of Third-Party Sharing…
The basic federal requirements for safeguarding Controlled Unclassified Information (CUI) in nonfederal systems have relied for some time now on the 110 controls within NIST SP 800-171 rev.2 (February 2020). The National Institute of Standards and Technology (NIST), in response…
The Office of the Under Secretary of Defense for Acquisition and Sustainment has released a formal instruction on cybersecurity for acquisition authorities and program managers that was effective on December 31, 2020. This document is referred to as DoD Instruction…