Critical Fault

Come hear Kris Wall provide insight into DoD's Evolving Cybersecurity Priorities at IWS17!

Hey everyone. What's a better way to start the week than to talk about government cyber regulations?! I had meant to post this last week, however I had a family member get in a car wreck. No one was hurt, but it definitely threw my schedule off a bit. #CMMC level 3... the most nebulous of the levels. We don't know what the exact requirements will be, but we do know it will be based of NIST 800-172. I expect the finalized rules to be a mix of some of the simpler and more complex security controls. There are some interesting ones such as trying to trip up attackers and honeypots, as well as some that I would recommend to any company like periodically reviewing all data and removing anything sensitive that's no longer needed. You can view my full summary here: https://lnkd.in/gcERmMpC Next I will be covering what to expect with the require assessments. Have a great week!

A little late, but here's the next #cmmc entry for level 2: https://lnkd.in/gKpkbpBp This one was a bit more difficult to decide what to write, as I did not want it to be a long boring read. There are almost 100 additional requirements above level 1, so I just tried to give some highlights by sections. Level 2 is where you start seeing more technical requirements that will be much more likely to start requiring outside assistance, but it also will likely greatly enhance most company's security postures.

I hope everyone is having a good Friday. Time for some Sa(a)S. We're continuing the CMMC series with a more detailed breakdown of the 3 levels. The full post can be seen here: https://lnkd.in/g-DCGGi2 For a quick summary, all 3 levels are from NIST SP 800 171 (and 172 for level 3), so it's at least not completely new standards. And why the standards are still in the rule-making process, we have a good idea what the final requirements will be. Level 1 will have 17 requirements and is intended for the least sensitive DoD contracts. This certification will be based off of a self assessment. Level 2 has a big jump to 110 total requirements as more national security implications are expected with the associated contracts. This is expected to be the most common level, and in most cases will require a 3rd party assessment every 3 years with an annual self assessment. Level 3 is for the most sensitive contracts that don't involve classified (or greater) designations and will add up to an additional 35 requirements above level two. For this, companies will need to have Federal officials perform the assessment every three years. Please reach out with any questions and have a great weekend! #cmmc #cybersecurity #securityawareness

🔒 Ever wondered how hackers think? Now's your chance to find out! 🕵️♂️💡 Join us for an exclusive Q&A session with Jordan Caldwell, Chief Security Officer at Critical Fault, and dive into the mind of a hacker. Gain insights on cybersecurity and protect your business from potential threats. 🗓 Date: August 8th 🕗 Time: 8:00 AM - 9:30 AM 📍 Location: The Petroleum Club 👉 RSVP now and secure your spot!👈 https://bit.ly/4fgsh03 #ItMattersWhereYouChamber #NorthSAChamber #TechBreakfastClub #Cybersecurity #SanAntonioBusiness

Over the next couple of months, I am going to be laying out a breakdown of the looming Cybersecurity Maturity Model Certification (CMMC) requirements that will be implemented for all Department of Defense (DoD) contractors and subcontractors. At first glance, it does seem to be daunting. But with the correct partners, especially someone who has spent over a decade reading, interpreting, and implementing government rules and regulations, it is something that can be overcome. For the first week, I want to provide a short background and introduction to CMMC. The full post can be viewed here: https://lnkd.in/g-ETWH5H. To keep it brief, the DoD is implementing CMMC as a way to ensure that their vast number of contractors and suppliers are reducing their attack surface and are more cyber resilient. And while this is only for the DoD, it is likely to serve as a model of requirements for more departments in the near future, such as the Department of Energy and Health & Human Services. As always, feel free to reach out with any questions, and have a great weekend!

Join us tomorrow at 5:00 in OKC at Rococo Private Events & Catering (at 28th & Penn) as Joan Stanolis discusses the ins and outs of cybersecurity! Today, it’s more critical than ever to understand the impact of our digital footprint, how to stay alert, and the proactive changes you can make to protect yourself and your businesses from cyber threats. RSVP for OKC at okwit.eventbrite.com.

OKWIT invites you to join Joan Stanolis as she discusses the ins and outs of cybersecurity! Today, it’s more critical than ever to understand the impact of our digital footprint, how to stay alert, and the proactive changes you can make to protect yourself and your businesses from cyber threats. RSVP for OKC or Tulsa at okwit.eventbrite.com.