Becoming CMMC or NIST Compliant and How to Prove It

⇨ Companies working with the Department of Defense will need to comply with the Cybersecurity Maturity Model Certification program by 2023.

⇨ These frameworks ensure basic data safety, network security, and cyber hygiene.

⇨ To be certified, companies must not just be compliant. They need to know how to prove it.

Over the next two years, many companies will face the challenge of compliance with the Cybersecurity Maturity Model Certification program, the U.S. Department of Defense’s supply chain cybersecurity requirements.
In part one of a three-article series, we will demonstrate how to first understand the NIST/CMMC frameworks, and how they relate to SOX and separation of duties.
CMMC was developed as a response to cyber threats and breaches of the military supply chain. Any company that has ties to a defense contract or supplies another company that holds a defense contract will be required to prove Level 1 foundational compliance. Level 1 is all about the basics of safeguarding networks and data, or basic cyber hygiene. What a lot of people don’t realize is they are already doing some of this with their existing SOX and NIST 800-53.x compliance programs.