The CMMC final rule is now under review by the Office of Management and Budget - a major milestone in making cybersecurity compliance mandatory for DoD contractors in the Defense Industrial Base. Learn what this means for your timeline, your contracts, and your next steps.

The DoD has officially shut down DIBNet, the portal for reporting cyber incidents under DFARS 252.204-7012. This ACT post explains what’s changing, where incident reporting now goes, and how to stay compliant with the new DCISE process.

The federal government is overhauling FedRAMP under the bold FedRAMP 20x initiative. For cloud service providers, this is the time to shape the future—not watch from the sidelines. Hive Systems explains what’s changing, why it matters, and how security pros can lead the charge.

When thousands of workers are laid off at once, it's not just jobs that disappear, and the technical and financial ripple effects reach every corner of the country.

Hackers are setting their sights on the IT supply chain, and your data is the prize. Meet Silk Typhoon—the latest cyber threat you need to know about.

If you work with Controlled Unclassified Information (CUI), the new proposed rule implements new requirements, including NIST 800-171 revision 2 compliance, for all federal contractors. Read our article to see how this could impact your company in the coming years.

Dwight D. Eisenhower, the 34th U.S. president, once said, 'Plans are nothing; planning is everything.' In this post we’ll dive into the fundamentals of incident response planning, and take it a step further to show how planning for an incident goes beyond just documentation.

A JSVA could be the answer your company has been looking for to get ahead of CMMC. Katie, a CCA on our team, helps outline everything you need to know about getting CMMC Level 2 certified - giving your company the advantage before CMMC even starts!

The long-awaited CMMC rule has finally been officially published and is accompanied by some beneficial changes from the original draft. We break them down for you so you and your organization can begin to prepare for the imminent enforcement.

NIST recently updated its decades-old password security guidance after years of scrutiny, skepticism, and flat-out ineffectiveness finally forced the agency to address practical security considerations and realistic threats while abandoning what many considered to be ineffective security theater.

The Federal Risk and Authorization Management Program (FedRAMP) has been a cornerstone for ensuring the security of cloud services used by federal agencies. Recently, significant changes to the program - specifically the sunset of the JAB have sparked discussions across the cloud computing landscape.

CMMC has been on the horizon for years, lurking in the distance and often thought of as a “tomorrow” problem. With the publication of the proposed rule to amend DFARS 252.204-7021, let this be a wake up call: CMMC is coming - and it’s coming quickly.

The long-awaited NIST 800-171 Revision 3 has been released. What’s new, and what are the implications for CMMC?

The DoD just released a proposed rule for implementation of all CMMC requirements by October 1, 2026. The plan will be implemented in four phases.

Are you part of the Defense Industrial Base (DIB) or have Department of Defense (DoD) contracts? Then your deadline for implementing the Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements is fast approaching.

The new requirements are meant to keep investors apprised of the cybersecurity risks taken by public companies. That includes both your current state as well as any ongoing or future incidents that will need to be evaluated for materiality and then reported within a 4 day period.