On October 11, 2024, the U.S. Department of Defense (DoD) at long last published a final rule establishing the Cybersecurity Maturity Model Certification (CMMC) Program (the Final Rule). Designed to ...

Regulatory compliance is a fact of life for most supply chains. A key enabler for a successful organization is to understand the complex regulatory environment and build compliance into their ...

Phil Goldstein is a former web editor of the CDW family of tech magazines and a veteran technology journalist. He lives in Washington, D.C., with his wife and their animals: a dog named Brenna, and ...

Response to detected offenses (including remediation of harm caused by criminal conduct) and corrective action plans (including assessment and modification of the compliance and ethics program); and ...

In general, higher-maturity learning programs are more effective at mitigating people risk by aligning employee behaviors to compliance standards and corporate values. They adhere more closely to DOJ ...

Explainability-driven data resilience, the glue that binds these elements together, needs to become as standardized as audited financial statements, hitting metrics for key stakeholders that include: ...

Many small organizations within the Defense Industrial Base are struggling to meet the rigorous requirements validated through the Cybersecurity Maturity Model Certification, writes Thomas Graham, ...

The Cybersecurity and Infrastructure Security Agency on Tuesday published a second version of its Zero Trust Maturity Model, which updates implementation guidance for agencies across key pillars ...

Creating and deploying public key infrastructure is notoriously difficult. However, a group of encryption vendors, consultancies, and other experts aim to make a resilient approach to encryption more ...