Cybersecurity compliance is not only required, but heavily enforced. Aerojet Rocketdyne falsely represented their compliance with multiple cybersecurity regulations. A suit was filed based on this information by a whistleblower in 2015. 7 years, and many hefty legal fees later,…
Welcome to the fourth posting in our series about 'what is' a particular area of regulatory concern and 'how can' RegDOX provide a solution. If you missed a previous post in this series, no worries! You can find all our…
Welcome back to part 2 of our blog posts about 'what is' a particular area of regulatory concern and 'how can' RegDOX provide a solution. In this posting, we will focus on DFARS compliance. Did you miss a previous post?…
The DoD weighed in yesterday with a promise of additional changes, and soon, to the Cybersecurity Maturity Model Certification (CMMC) program. We are told these changes will reflect industry feedback plus “internal government activities”. It appears they are a result of…
While traditionally people have learned things through reading, many people prefer to learn about things by watching videos. Regardless of the method you prefer, there are many resources available for educating yourself on the Cyber Maturity Model Certification (CMMC). The…
"If you think compliance is expensive, try non-compliance." former U.S. Deputy Attorney General Paul McNulty – June 2009Paul McNulty really did say it best. Many organizations feel that the cost of compliance is too great a burden to undertake and…
When considering RegDOX’s patented cloud solution for ITAR and DFARS compliant handling of federally defined Controlled Unclassified Information (CUI), many companies come to us with a series of questions that can be summarized in three general categories: What are the…
The International Traffic in Arms Regulation (ITAR) is an established authoritative and mandatory list of compliance guidelines. These guidelines are set by the State Department’s Directorate of Defense Trade Controls (DDTC). It is important that any company that exports products…
Well, it finally happened. Despite all your efforts in security awareness training and the latest in hardware and software technology, somehow something bad happened: You got breached. Do not freak out or feel too bad. Here's how to report to…
The basic federal requirements for safeguarding Controlled Unclassified Information (CUI) in nonfederal systems have relied for some time now on the 110 controls within NIST SP 800-171 rev.2 (February 2020). The National Institute of Standards and Technology (NIST), in response…