by Pivot Point Security | Apr 22, 2022 | Government
Reading Time: 5 minutes
Here’s an excerpt from a hypothetical meeting between an IT Director and a Business Development Director: IT: We need to invest in cybersecurity? BD: Why? IT: We need immutable backup, we need to enforce multifactor...
by Pivot Point Security | Apr 8, 2022 | Government
Reading Time: 2 minutes
CMMC 2.0 is being implemented through rulemaking changes to the Code of Federal Regulations (CFR), Parts 32 and 48, including the Defense Federal Acquisition Regulation Supplement (DFARS) within 48 CFR. The CFR applies...
by Pivot Point Security | Apr 8, 2022 | Government
Reading Time: 2 minutes
The clock is ticking for orgs in the US defense industrial base (DIB) that have been “checking the boxes” on NIST 800-171 compliance. As reported on a recent episode of The Virtual CISO Podcast by guests Kyle Lai,...
by Pivot Point Security | Apr 7, 2022 | Government
Reading Time: 3 minutes
The new CMMC scoping guidance defines five asset classes. While the intent is to help defense suppliers refine and potentially narrow down the scope of their CMMC enclaves, the result has been to increase awareness of...
by Pivot Point Security | Apr 7, 2022 | Government
Reading Time: 4 minutes
There’s a good reason why leading security standards like ISO 27001 and the NIST Cybersecurity Framework strongly emphasize the importance of executive support for security programs. Without it, your program is toast....
by Pivot Point Security | Apr 6, 2022 | Government
Reading Time: 3 minutes
On the Center for Internet Security (CIS) Critical Security Controls list, asset management is at the top. It’s foundational to any cybersecurity program, especially a robust posture like what NIST 800-171 mandates to...
