Blog

NIST SP 800-53 R5 vs FedRAMP R5 vs NIST SP 800-171 R2 vs NIST SP 800-171 R3 Within the Defense Industrial Base (DIB), there is considerable confusion about the concept of "FedRAMP equivalency" as it p … read more

Strategy vs Operations vs TacticsThe purpose of this article is to help cybersecurity leaders up their game by gaining a baseline understanding of strategy vs operations vs tactics.All too often,  … read more

Policy vs Standard vs Control vs Procedure When it comes to cybersecurity compliance, words have specific meaning and it is important to get those terms correct. In reality, these cybers … read more

Statutory vs Regulatory vs Contractual: Cybersecurity & Privacy ComplianceCompliance terms are pretty badly abused, even by professionals within the cybersecurity and privacy industries. Word … read more

Threat vs Vulnerability vs Risk Threat, vulnerability and risk management practices are meant to achieve a minimum level of protection - this equates to a reduction in the total risk due to the pr … read more