PCI Compliance

HIPAA / HITECH Compliance

GLBA Compliance

ARE YOU PREPARED?

The United States Department of Defense (DoD) will require organizations conducting business with the DoD (i.e., defense contractors) to obtain a Cybersecurity Maturity Model Certification (CMMC) involving verification from an independent assessor.

• Readiness
  -Inventory all existing DoD contracts, subcontracts, awards and agreements.
  -Inventory all systems that collect, store, and process FCI and CUI.
  -Conduct a gap assessment of current cybersecurity controls relative to the model and determine remediation activities to achieve desired certification level.

• Remediation
  -Prioritize remediation activities.
  -Implement remediation activities.
  -Reassess cybersecurity controls.

• Documentation
  -Document cybersecurity policies and desired certification level.
  -Formalize relevant controls in procedural documentation.
  -Assemble all documentation in preparation for certification.