Blog

This is a somewhat contentious topic in the cybersecurity community. When you are discussing the scope of applicability for controls, is it: Limited to People, Processes & Technology (PPT)? Inclu … read more

The Chevron deference, often referred to as the Chevron rule, is a legal principle in the United States that stems from a Supreme Court case called Chevron U.S.A., Inc. v. Natural Resources Defense Co … read more

Complying with NIST SP 800-171 & CMMC can be hard enough without arguing over terminology. Terminology pertaining to cybersecurity documentation is often abused, so a simplified concept of the hie … read more