Leveraging Managed Security Service Providers for NIST 800-171 and CMMC Compliance in the Defense Supply Chain

Feb 28, 2024 Lazarus Alliance 0 Comment

The complex relationships between government agencies, third-party vendors, and managed service providers form a challenging web of connections that comprise the DoD digital supply chain. Both NIST 800-171 and CMMC address these at various points, expecting providers to adhere to complex security requirements. These requirements can become so complex that they may turn to Managed Service Providers (especially those in the security space) to help them maintain compliance.

This article will cover how an MSSP can help you streamline compliance across frameworks like NIST 800-171 and CMMC.

The Necessity and Challenges of Cybersecurity Program Maturity

Aug 16, 2023 Lazarus Alliance 0 Comment

The U.S. Department of Defense launched the Cybersecurity Maturity Model Certification (CMMC) in response to the escalating cyber threats. This initiative underscores the increasing emphasis on the maturity of cybersecurity programs as a benchmark for assessment and standardization within the Defense Industrial Base and its extensive supply chain.

Yet, a surprising revelation from Infosecurity Magazine indicates that a mere 22% of organizations have fully matured their cybersecurity programs.

This article discusses the foundation of cybersecurity maturity, its significance, and best practices.

CMMC 2.0, NIST, and Risk Management

Apr 26, 2023 Lazarus Alliance 0 Comment

Cyber threats continue to grow in complexity and sophistication. To address this evolution, the Department of Defense has introduced the Cybersecurity Maturity Model Certification (CMMC) 2.0 to ensure that defense contractors maintain robust cybersecurity practices to protect Controlled Unclassified Information (CUI).

To address one of the most important processes in modern security (risk management), CMMC 2.0 includes some risk assessment requirements.

This article will explore risk management’s vital role in achieving CMMC 2.0 compliance and its connection to the National Institute of Standards and Technology (NIST) guidelines, specifically NIST SP 800-171. We will delve into the various control families of NIST 800-171 and 800-172, their impact on risk management, and the steps organizations can take to address potential risks effectively.