PPP Forgiveness Guidance Webinar | Dec. 3, 2020

  • Posted by Liz Overstreet
  • On October 30, 2020
The U.S. Small Business Administration and Department of Treasury recently rolled out policy updates to the Paycheck Protection Program Forgiveness Application. Do you need some clarity around loan forgiveness? Attend this informative webinar! We will cover: What changes have been made to the PPP Forgiveness Process and where does it currently stand? When CAN you […]
Read More
 

In the COVID-19 Response, Consider Time to ‘Take a Knee’…

  • Posted by Mark Lupo
  • On September 11, 2020
Back in my Army days, I was part of a Team, a Special Forces ‘A’ Team, to be more exact.  We did a lot of training, carried a lot of weight over a lot of miles and built a great camaraderie together through the struggles.  As I was thinking back to those days this morning […]
Read More
 

The CMMC Level 1, 17 Practices Identified and Explained

  • Posted by Mark Lupo
  • On August 8, 2020
Welcome to this final entry regarding the 17 Practices within CMMC Level 1 compliance.  This article identifies the 6 Domains, containing 9 Capabilities and requiring 17 Practices to be active and integrated within the company operations in order to comply with 48 CFR 52.204-21 and to reach CMMC Level 1 compliance.  There are no Processes […]
Read More
 1

CMMC V1.02 – SI.1.213 – Perform Periodic Scans of Information Systems

  • Posted by Mark Lupo
  • On August 8, 2020
In our final entry of the Practices found in CMMC Level 1, within the Domain, System and Information Integrity, we cover SI.1.213 – Perform periodic scans of information systems and real-time scans of files from external sources as files are downloaded, opened or executed.  This Practice is found within the Capability, C041, Identify Malicious Content, […]
Read More
 1

CMMC V1.02 – SI.1.212 – Update Malicious Code Protection Mechanisms

  • Posted by Mark Lupo
  • On August 7, 2020
The third Practice within the System and Information Security, also falling under the Capability, C041, Identify Malicious Content, is SI.1.212 – Update Malicious Code Protection Mechanisms When New Releases are Available.  This Practice focuses on ensuring you protect your IT system with new security releases and monitoring your system regularly.  You can find the Practice […]
Read More
 1

CMMC V1.02 – SI.1.211 – Provide Protection From Malicious Code

  • Posted by Mark Lupo
  • On August 6, 2020
We now explore the 2nd Practice within the Domain, System and Information Integrity (SI), S.I.211 – Provide protection from malicious code at appropriate locations within organizational information systems. This Practice falls under the second Capability within the (SI) Domain, C041, Identify Malicious Content and can be found in the CMMC Appendix B, page B-238 (Page […]
Read More
 1

CMMC V1.02 – SI.1.210: Identify, Report and Correct Information/Flaws in a Timely Manner

  • Posted by Mark Lupo
  • On August 5, 2020
In this entry, we move into the final Domain for Level 1, System and Information Integrity (SI). This domain ensures that technology assets (e.g., desktops, software) that contain CUI are continuously monitored to detect violations of the authorized security state. Additionally, electronic mail (email), a common attack vector, is monitored and protected to detect malicious […]
Read More
 1