NIST SP 800-171 Audit Logs and SEIM

Reading Time: < 1 minute In this edition of the On Call Compliance Solutions Compliance Tip of the Week, we are talking about what’s up with all of these weird controls in NIST SP 800-171 requiring you to review and audit logs from the systems that may contain secure information. Let’s look at Control 3.3.1 – Create and retain system […]

NIST SP 800-171 and the System Security Plan

Reading Time: < 1 minute In this edition of the On Call Compliance Solutions Compliance Tip of the Week, we are talking about a word that is often very misunderstood when it comes to NIST SP 800-171 and its System Security Plan. You see often times we get calls from clients who are frantically trying to implement solutions prior to […]

Cyber AB CMMC Assessment Process: Test and Analyze

Reading Time: < 1 minute The Cyber AB recently released its DRAFT CMMC Assessment Process (CAP) document. As part of the CMMC Assessment Process, the Assessment Team will be conducting live tests or demonstrations to provide detailed operational insight into the effectiveness of the CMMC practices implemented in your system, including an understanding of how those practices are executed or […]

Enduring Exceptions

Reading Time: < 1 minute So, as the CYBER AB has now revealed its CMMC Assessment Process it begs the question: What about Enduring Exceptions? Nothing mentioned. Nothing revealed. So, what’s the deal?

Cyber AB CMMC Assessment Process: Conduct Interviews and Assess Responses

Reading Time: < 1 minute The Cyber AB recently released its DRAFT CMMC Assessment Process (CAP) document. In this video, we focus on Phase 2 and the assessment methods of conducting interviews. The Cyber AB stresses in the CAP that interviews are an effective means to glean insight into the CMMC conformance of an organization seeking certification, including an understanding […]

CYBER AB CMMC Assessment Process: Examining and Analyzing Evidence

Reading Time: < 1 minute The CYBER AB recently released its DRAFT CMMC Assessment Process (CAP) document. In this video, we focus on Phase 2 and the assessment methods of examining and analyzing evidence.

CMMC Assessment Process: The Four Phases

Reading Time: < 1 minute In this video, we drop on you the four basic phases of getting CMMC certified, once you have gotten prepared and think you are ready for a full-blown CMMC Assessment by a certified C3PAO. Let’s dive right in!

CMMC Assessments Are Coming!

Reading Time: < 1 minute Mike Frieder, President of On Call Compliance Solutions, sits down with Sese Bennett, CEO at Provincia Government Solutions, to discuss the future of Cybersecurity Maturity Model Certification in the World’s First Interview with a CMMC Certified 3rd Party Assessor (C3PAO). The Cyber AB announced recently that CMMC Assessments will commence later this month with voluntary […]

Understanding Awareness and Training in NIST 800-171

Reading Time: < 1 minute If you are not serving up a culture for compliance in your business someone within your business is going to take that as a cue to get lax or worse not even care about compliance or security and that is when ransomware, phishing attacks, or any cyber-attack really can gain an access point to your […]

CMMC 2.0 – How It Will Affect You As a Defense Contractor

Reading Time: < 1 minute In this recorded webinar On Call Compliance Solutions President and CMMC Registered Practitioner Mike Frieder tells you everything you need to know as a defense contractor about CMMC 2.0 and how it will affect your future. Click the title above to view the video.