Cybersecurity compliance is not only required, but heavily enforced. Aerojet Rocketdyne falsely represented their compliance with multiple cybersecurity regulations. A suit was filed based on this information by a whistleblower in 2015. 7 years, and many hefty legal fees later,…
Welcome to the fourth posting in our series about 'what is' a particular area of regulatory concern and 'how can' RegDOX provide a solution. If you missed a previous post in this series, no worries! You can find all our…
In Part 1 and Part 2 of this three-part series, we reviewed why companies that handle federally-defined Controlled Unclassified Information (CUI) must comply with several sets of regulations and how RegDOX’s solution can enable that compliance. So how do you…
In Part 1 of this three-part series, we reviewed the primary federal regulations covering Controlled Unclassified Information (CUI). Today, we’re discussing how companies can achieve compliance with one-stop shopping with the RegDOX Data Room System. Question 2: How does the…
The International Traffic in Arms Regulation (ITAR) is an established authoritative and mandatory list of compliance guidelines. These guidelines are set by the State Department’s Directorate of Defense Trade Controls (DDTC). It is important that any company that exports products…
Note: This is unrelated to Microsoft’s announcement of security patches for other similar vulnerabilities on April 13, 2021. THERE ARE NO MORE RULES Today we are going to talk about what happens when you do not address security problems in…
Well, it finally happened. Despite all your efforts in security awareness training and the latest in hardware and software technology, somehow something bad happened: You got breached. Do not freak out or feel too bad. Here's how to report to…
Step 1. Admit You Have A Problem. If you want to play with the big boys - or at least the Department of Defense (DoD) -you need to realize that there are going to be some rules and regulations that…
Today’s article in the Wall Street Journal titled Hacker Group Says It Accessed Tesla’s, Others’ Internal Video-Surveillance Feeds reminds us of the increasing cybersecurity risks to businesses of video conferencing. RegDOX’s whitepaper on CUI and the Risk of Third-Party Sharing…
The basic federal requirements for safeguarding Controlled Unclassified Information (CUI) in nonfederal systems have relied for some time now on the 110 controls within NIST SP 800-171 rev.2 (February 2020). The National Institute of Standards and Technology (NIST), in response…