Blog

Determining the scope of controls (e.g., assessment boundary) is different than determining control applicability. Do you know the difference?The Unified Scoping Guide (USG) is a free resource to make … read more

NIST 800-171 focuses on protecting Controlled Unclassified Information (CUI) anywhere it is stored, transmitted and processed. These controls are directly linked to NIST 800-53 and are a subset of th … read more

NIST SP 800-171 is now applicable to certain insurance providers.Under the Department of Homeland Security (DHS) Federal Emergency Management Agency (FEMA) enters into arrangements with private s … read more

What is the single greatest threat that your organization faces? SolarWinds-style attacks? APTs? The answer is not what many initially think and the reason is primarily based on the sensitive natur … read more