On Friday, May 7th, a ransomware attack disrupted operations and halted the flow of gasoline, diesel, and jet fuel through Colonial Pipeline. This was the largest cyberattack on an oil infrastructure target in US history. It led to a shutdown of the pipeline carrying 45% […]
Cloud to Cloud Backups Summary:
“How does Exchange Online backup my email?”
You might be under the impression that your data in the cloud is guaranteed by the provider against loss and that lost files or lost email messages can be easily restored. That is not the […]
EXP Technical recently hosted a FREE webinar entitled “Right-sized Solutions for NIST/CMMC Compliance.”
Among the items covered in the presentation were:
“High Value” Items in the NIST SP 800-171 Security Requirements and Journey to CMMC Level 3
Security Operations Center (SOC) as a Service
Pragmatic Approach to Security Information […]
If your business is a subcontractor in the defense industrial base, you have, no doubt, been hearing a lot over the past year about Cybersecurity Maturity Model Certification. Still the definition of each level and the path to your desired CMMC level may be […]
Controlled Unclassified Information, or CUI, is at the heart of Cybersecurity Maturity Model Certification.
How did we get here? An overview of classified information and CUI.
The classification of information by the US government exists to secure sensitive information that is not intended for public release. […]
Webinar: Right-Sized Solutions for NIST/CMMC Compliance
When: Thursday, April 8th, 2021 at noon
Registration: Registration for this event is closed, but you can now view the presentation any time, on demand at this link.
Abstract:
New rules regarding CMMC compliance have small and medium-sized federal contractors wondering, “How […]
If you are a supplier to the defense industrial base (DIB), Cybersecurity Maturity Model Certification (CMMC) may be intimidating, even overwhelming. This series of blog posts will explore CMMC for small and medium-sized businesses, leading to right-sized solutions.
CISA – the Cybersecurity & Infrastructure Security Agency – has released a very useful tool to help IT personnel detect malicious activity in an Azure/Microsoft 365 environment. EXP consultants can now run this tool against our clients cloud tenants at Microsoft and potentially identify accounts […]
October is National Cyber Security Awareness Month. In 2004, the Department of Homeland Security and the National Cyber Security Alliance launched National Cyber Security Awareness Month as a broad effort to help Americans stay safe and secure online. The threat landscape has exponentially grown […]