Blog

What is the point of a company spending significant money and effort on Governance, Risk & Compliance (GRC) activities? It is to provide stakeholders with ASSURANCE that the organization has secur …

read more

Guest Author: Scott Alldridge (CEO, IP Services) For the first time in history, China has come very close to matching the US despite being years behind in AI, where this new arms race is not just for …

read more

The DoD released an updated Frequently Asked Questions (FAQ) document to address the 32 CFR CMMC Program Rule. This is content that everyone should be familiar with to help avoid assumptions.You can d …

read more

This is a decision tree for CMMC 2.0 asset scoping. Thanks to the many volunteers who helped refine this updated scoping tree that is based on the recent CMMC L2 scoping guide and 32 CFR Part 170! Thi …

read more

Disclaimer: No C3PAOs were harmed in the making of this fairytale. However, Goldilocks did pick up a day drinking habit that led to several unintelligible LinkedIn postings and other questionable deci …

read more

Note: This is a guest article by The Net Effect (TNE). TNE specializes in helping organizations develop information security and compliance programsin security awareness training. When someone is firs …

read more