Small and medium-sized businesses are particularly vulnerable due to limited IT and security resources and expertise, which can hinder their ability to build software for government agencies and contractors. Standards exist to help these businesses stay in the game and remain competitive in a crowded software market, however. Specifically, the Secure Software Development Framework (SSDF).… Read More

The Cybersecurity Maturity Model Certification (CMMC) framework aims to enhance the protection of sensitive data across the defense industrial base. Understanding and implementing CMMC is vital for business decision-makers to safeguard their increasingly vulnerable digital supply chains.  This article discusses the importance of CMMC in supply chain security and provides actionable insights for enhancing your… Read More

Two years ago, we wrote about the emerging zero-day exploit Log4Shell and its impact on various systems. A new report from Skybox Security (covering vulnerability trends in 2023) calls this exploit the top vulnerability of the year.  This article will revisit the Log4Shell exploit and how it has played out since our last coverage.

The new CMMC rule proposal is out, and some organizations are getting their first introductions to the cost of doing business in the federal sector. This new rule includes several estimates for the total costs of adopting the framework for small and larger businesses.  But is this the final word? We break down some of… Read More

With Executive Order 14028’s requirements coming into effect, government agencies and their software partners are looking for ways to meet these stringent requirements. These include managing system security across all potential attack vectors, including those introduced during the development cycle.  Here, we discuss how the Secure Software Development Framework is a good baseline for approaching… Read More

Across government and private organizations, the need to match records and confirm death has become a major concern. People who take out credit or receive benefits do so because they are living, and once they pass, there must be a way to align the state of their benefits and finances. This is where the NTIS… Read More

Business decision-makers can only talk about AI. This seemingly ubiquitous solution introduces several quality-of-life capabilities and significant cybersecurity issues.  Here, we touch on Executive Order 14110 and how it addresses this issue for government agencies and contractors. 

The Secure Software Development Framework, outlined in NIST Special Publication 800-218, provides guidelines and best practices to enhance the security and integrity of software development processes. NIST developed it to help organizations implement secure software development practices and mitigate risks associated with software vulnerabilities. 

Modern industry relies heavily on automation and control systems to maintain efficiency, productivity, and safety. With the increasing integration of these systems into broader networks, the risk of cyberattacks has significantly grown. ISASecure, a globally recognized cybersecurity certification program, is a critical certification body providing standards and assessments to protect these integral systems against modern… Read More

Insider threats are a massive problem due in no small part to the prevalence of apps, accounts, and systems that employees have to plug into daily. Once you’ve let an employee go, there’s no accounting for how they can steal data using their old credentials… unless you have a proper offboarding plan.  Here, we discuss… Read More

Hardware, operating systems, software and apps, and third-party platforms are all components of your IT infrastructure, including its operating procedures and settings. Misconfiguration of these components can have ripple effects across an entire network, so investing time and effort into configuration management is critical. Here, we cover secure configuration management and why it’s essential for… Read More

Like any other agency, the IRS works with a network of technology providers and third parties to support its mission of managing sensitive financial data. These relationships present unavoidable security risks. IRS 4812 helps address these security challenges by outlining security requirements and best practices for contractors working with the IRS to handle specific forms of… Read More