If you are a history nerd you might happen to know that Kiev, the current day capital of Ukraine, was once actually the capital of Russia. That is until the Mongols seized Kiev in 1240, occupying most of Russia for…
Over the last several years, I have personally written SSP’s (System Security Plans) for close to 50 DIB (Defense Industrial Base) organizations of every type and size that one might imagine. The smallest were for one or two person shops,…
Everything NIST compliant DoD Contractors Need To Know Now That CMMC Version 1.0 Is Out! The Office of the Under Secretary of Defense for Acquisition & Sustainment released the much anticipated CMMC (Cybersecurity Maturity Model Certification) version 1.0 just…
As a security guy, I get asked about Identity Theft a lot, and what can be done about it. To understand the problem, we have to first do a little bit of root cause analysis. In the spirit of Socrates,…
What is the Cybersecurity Maturity Model Certification (CMMC)? CMMC is an acronym that stands for “Cybersecurity Maturity Model Certification”. The CMMC effort builds on existing regulations DFARS 7012 / NIST 800-171. The key word here is “Certification”, because like…
Stronghold Cyber Security CEO Jason McNew was recently quoted by Federal Computer Week (FCW) for an article titled "Contractors have questions about DOD's cyber requirements", which discusses the Pentagon's latest move in improving cybersecurity for the industrial base, and includes…
In June, the NIST 800-171 revision 2 draft was released to the public for evaluation and here at Stronghold Cyber Security, we have performed dozens of NIST 800-171 assessments for DoD contractors of every type and size, all over the…
The Japanese government is requiring defense manufacturers' within its supply chain to start adhering to the NIST 800-171 standard in order to implement cyber resilience and protect against cyber attacks. In November 2018, at the C&C User Forum & iEXPO2018…
The Ohio Data Protection Act, also known as Senate Bill 220, was signed into law on August 3, 2018 and became effective on November 2, 2018. This act was designed to legally incentivize businesses and organizations to voluntarily implement a…
The American Bar Association has again invited Stronghold Cyber Security founder and CEO Jason McNew to speak at its ABA TECHSHOW 2019 event hosted at the Hyatt Regency in Chicago, Illinois from February 27 - March 2, 2019. The ABA…
