A Business Associate Agreement (BAA) is an essential legal contract regarding healthcare data privacy and security. Most BAAs pertain to the Health Insurance Portability and Accountability Act (HIPAA). A BAA […] [...]
Multi-factor authentication (MFA), also known as two-factor authentication (2FA), is a security method that requires users to provide two or more different types of identification before gaining access to a […] [...]
As organizations seek to obtain CMMC compliance, there can be quite a bit of confusion around who they need to approach for help. It’s important to understand where you are […] [...]
After months of speculation and confusion surrounding the CMMC compliance deadline, prominent Washington contract lawyer Robert Metzger was one of the first to break the news that DoD has sent […] [...]
When it comes to the Cybersecurity Maturity Model Certification (CMMC), understanding the regulatory landscape is crucial. Two major aspects of the Code of Federal Regulations—Title 32 and Title 48—constitute the […] [...]
In 2019, the DoD developed the Cybersecurity Maturity Model Certification (CMMC) to help organizations in the Defense Industrial Space (DIB) space certify cyber readiness. Since the inception of this initiative, […] [...]
The ceaseless transformation of the digital realm has put cloud security firmly on the map, making it a critical imperative for organizations charged with protecting sensitive data. Lacework, a leader […] [...]
As personal health information is stored and transmitted electronically, safeguarding patient data has become an imperative in our modern digital era.The Health Insurance Portability and Accountability Act (HIPAA) sets forth […] [...]
Any organization in the DiB space is required to achieve CMMC compliance. No matter where you are in your CMMC journey, it’s important to address any gaps that may occur. […] [...]
The Cybersecurity Maturity Model Certification (CMMC) is intended to help protect the supply chain of the U.S. Department of Defense (DoD). Organizations that handle sensitive government information will be required […] [...]