The Department of War has suspended CMMC Phase 2’s mandatory third-party assessment requirement, citing concerns that the assessor ecosystem couldn’t scale to meet demand and that compliance costs were pushing small and mid-sized firms out of the defense industrial base. … Read More "Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday"
The Pentagon is suspending Cybersecurity Maturity Model Certification (CMMC) phase two requirements that were set to take effect in November, pending a 60-day review of the entire program. Kirsten Davies, CIO at the Department of War (formerly the Department of… Read More "Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules"
The proper handling of data ownership and an updated inventory of assets are imperatives in cybersecurity toward the protection of sensitive information and keeping pace with regulations. Understanding of roles and responsibilities enveloping the data ownership coupled with the updated… Read More "Ownership and Inventory in Cybersecurity"
Data classification is among the most basic organizational practices that ensure sensitive information is safely guarded and its regulation and compliance are easier to implement. Proper data classification allows organizations to handle data according to sensitivity, thus reducing risks related… Read More "Classifying Data in Cybersecurity"
