Eric Reed

Questions about a C3PAO working with DIBCAC for a JSVA? Questions about those abbreviations? Up On Cyber's newest episode is with our CMMC Third Party Assessor Organization Team talking about working with the Defense Industrial Base Cybersecurity Assessment Center on a Joint Surveillance Volunteer Assessment. Links in Comments!

4

2 Comments

The US DoD announced the CMMC 2.0 roll out is on track for the start of 2025 - are you ready? Last week at the Potomac Officers Club’s 2024 Cyber Summit, DoD Deputy Chief Information Officer for Cybersecurity and Senior Information Security Officer David McKeown congratulated the ‘tremendous perseverance’ of the architects enabling and enforcing the revised three-tiered incoming compliance program. If you're a contractor or subcontractor within the US DIB supply chain, affirmative compliance is required by Oct. 1st 2026. However, McKeown's announcement that the DoD is on track to officially start rolling out and including CMMC 2.0 in contract paperwork in the first quarter of 2025 calendar year, is an important reminder to prioritise action. Cocoon Data's KBOSS for Workspace is launching just in time to streamline your path to CMMC 2.0. Paired with Google's Assured Control Plus and when appropriately configured, the KBOSS Add-on secures assured workloads to meet CMMC 2.0 and ITAR requirements, setting a new standard for classified collaboration. It's time to get on track, be future-ready with KBOSS. #DoD #CMMC #Cybersecurity #KBOSS #DIB

18

Cyber. Assessments are crucial components of a proactive and adaptive cybersecurity strategy with an ever-evolving threat landscape. value@coffeetreegroup.com 248-526-3315 https://lnkd.in/d9axNrFV

7

Coming up this week -- STILL TIME TO REGISTER -- learn about #CMMC #cybersecurity compliance for DoD contractors & subcontractors, 4/18 at 2p: https://lnkd.in/edsTrBup

1

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

7

🛡️🔍 Crucial Update: DOD's New Cybersecurity Class Deviation 🛡️🔍 Earlier this month, on May 2, 2024, the Defense Department (DOD) issued a pivotal Class Deviation concerning the safeguarding of Covered Defense Information and Cyber Incident Reporting, effective immediately. This move, as outlined in the accompanying press release, is designed to give the industry time to transition to the upcoming National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Revision 3. This deviation is crucial for several reasons: 1. Transition Period: It provides both the industry and the DOD the necessary time to align with the forthcoming updates in NIST SP 800-171, ensuring smoother transitions and enhanced cybersecurity protocols. 2. Clarity in Compliance: The mandatory clause now requires contractors to adhere to NIST SP 800-171 Revision 2, replacing the previous version stipulated at the time of contract solicitation. This eliminates any confusion regarding which version is applicable. This deviation is particularly significant given that the final version of SP 800-171 Revision 3 was published on May 14, 2024. The updated guidelines incorporate the following: - Reflecting current best practices 📈 - Introducing "Organization-Defined Parameters" for flexible cybersecurity approaches 🔄 - Updating to current versions of NIST SP 800-53, Revision 5, and NIST SP 800-53B moderate control baseline 📜 - Creating a prototype CUI overlay 🛠️ - Providing expanded resources to aid in risk mitigation 🛡️ For those of us in the defense contracting space, this means we need to stay vigilant and ensure compliance with these new guidelines. The adjustments based on public comments have fine-tuned the final version, retaining essential elements like "organization-defined parameters" with added clarity and consistency with SP 800-53B. Key Takeaway 🚀 Moving forward, contractors subject to the DFARS must ensure that the new mandated clause from this deviation is included in new awards or modifications to existing contracts. This proactive step will help maintain compliance and avoid any potential pitfalls related to cybersecurity standards. 🔗👇 Click the link to read the complete article👇 🔗 💬 Let’s stay connected and keep our conversations going on how best to implement these changes. Share your thoughts and experiences in the comments below! 💬👇 #CyberSecurity #DOD #NIST800171 #DFARS #Compliance #InterSec #InterSecInc #DefenseContracting #RiskManagement #CMMC

5

Download OSIbeyond's DoD Contractor’s Guide to CMMC 2.0 Compliance to learn the steps DoD contractors need to take in order to prepare for, achieve, and maintain CMMC 2.0 compliance. https://lnkd.in/dtqNsHTh #CMMC #DoDContractors #CMMCCompliance

7

Zoinks!! Here are 5 tips for Hurricane Preparedness in IT for all businesses: 1. Data Protection: Create extra backups of your data 24 to 36 hours prior to the storm’s predicted arrival. 2. Equipment Safety: Relocate computers away from windows and doors and elevate them off the floor on the final day before the office is closed due to the storm. 3. Power Disconnection: Disconnect power cords and surge protectors, and raise them off the floor on the last working day before the storm. 4. Window Security: Ensure all windows are securely boarded up on the final day before the office is closed. 5. Essential Hardware: Make certain that your team takes any crucial computers with them when they evacuate. This is especially important for computers that have locally installed business-critical applications such as QuickBooks, AutoCAD, or bespoke software. Gang -If you’ve got any groovy tips or tricks on the topic, don’t be shy! Share ‘em with the gang! ...And if you want customized recommendations for your organization or industry, reach out for a free chat, and I will help you solve the mystery! #ITPreparedness #HurricaneSafety #DataProtection #BusinessContinuity #DisasterRecovery #MosherConsultingLLC

8

2 Comments

Friendly reminder that any method of communication can be intercepted and exploited. That's why it's important to review your login methods and activate 2FA if possible. With this specific exploit, if what the actor claims is accurate, the purchaser will be able to take over an entire user's iPhone without even having to open the message or interact with an attachment. Always be mindful of information that you share and the devices that have personal, financial, and sensitive information on them. Additionally, review any information published by the Cybersecurity and Infrastructure Security Agency, your country's respective agency, and private cybersecurity firms as well. #securityawareness #privacyisnotanoption #privacy #knowledge #iphone #apple #mobile

3

OMB's Cyber Budget Priorities Memo out: "Agency budget submissions should demonstrate how agencies are reducing risk by increasing maturity of information systems across the pillars outlined in the Cybersecurity and Infrastructure Security Agency’s (CISA) Zero Trust Maturity Model." https://lnkd.in/e2dvJU3k

21

4 Comments

Connect with Jonathan Baker, Center for Threat-Informed Defense at MITRE Engenuity on Thursday, July 11th at SecureIT New York! Join us for a session that will explore how to measure, maximize, and mature your threat-informed defense. Discover how to identify areas for improvement so that you can make better investments and strategic decisions to strengthen your defenses. Register Now ➡ https://bit.ly/3uQTVON #CSOSecureIT #CSOSecureITNewYork #CSOevents #RiskManagement #cybersecurity

4