DevSecOps with Compliance – Elevating Responsibilities for Cybersecurity
By Chor-Ching Fan Working with our customers and with colleagues over the years, the truth cannot be more clear than it is today. The term DevSecOps does not do [...]
ICS/SCADA: Security and Compliance for Critical Infrastructure
By Celia Baker Security is vital for the continued performance and safety of the Industrial Control Systems (ICS) that help manage operations for oil and gas refineries, nuclear plants, [...]
DoD Revs Up Emphasis on 800-171 with Scoring Requirement
By Chor-Ching Fan When the recently released CMMC Interim Rule (DFARS Case 2019-D041) takes effect on November 30, 2020, the Department of Defense (DoD) will require defense contractors to [...]
DoD CMMC 1.0 Spec Released! What are My Options?
DoD CMMC 1.0 Spec Released! What are My Options? By Chor-Ching Fan and David Hall The DoD Cybersecurity Maturity Model Certification (CMMC) intends to be the new best way [...]
CMMC Says Goodbye to POAMs
By Chor-Ching Fan Under NIST SP 800-171, Department of Defense (DoD) contractors were considered compliant if they could demonstrate a plan for meeting security requirements at a future date. [...]
THE VIRTUAL COMPLIANCE OFFICER (vCO)
By Chor-Ching Fan Most of us have heard of on-demand virtual CISOs. A vCISO offers outsourced security expertise to businesses on a part-time basis. As demand for CISOs outstripped [...]
SIMPLE CONTINUOUS COMPLIANCE MONITORING
By Chor-Ching Fan You did it! It was hard work, but you reached your goal: certified compliance. But wait. Compliance is not a one and done thing. Did you [...]
WHAT’S GUIDED COMPLIANCE
By Chor-Ching Fan Guided Security & Compliance (GSC) is a term we came up with describe the driving approach that underpins Rizkly. GSC allows small and medium-sized businesses (SMBs) [...]
HOW TO WORK EFFICIENTLY WITH A COMPLIANCE CONSULTANT
By David Trout Getting the most out of your investment in consulting services for compliance means finding a way to work more efficiently. Rizkly understands that so we've built [...]
THE RIGHT TOOL GETS YOU COMPLIANT, NOT FRUSTRATED
By David Trout Compliance projects involve designing, implementing, and documenting dozens or even hundreds of security controls. Whether you multiple that by a small team of ONE already-overworked person [...]