Quick answer: There are three CMMC levels. Level 1 applies if you handle Federal Contract Information (FCI) and requires 15 controls across roughly 57 assessment objectives, self-assessed annually. Level 2 applies if you store, process, or transmit Controlled Unclassified Information (CUI) and requires 110 controls across 320 assessment objectives, based on NIST 800-171 Revision 2.[…] Read
Published by Austin Justice, Justice IT Consulting LLC
Artificial intelligence (AI) is an exciting technology that has the power to do things we never thought possible. Its rapid growth in such a short time suggests an even more promising future for technology. However, as AI improves, its potential for harm in the wrong hands also increases. One of those threats is AI-powered phishing[…] Read
Recent massive Microsoft security updates underscore a permanent shift in channel IT. Threat actors increasingly use automation, exploit research, and AI-assisted techniques to shorten the time between vulnerability disclosure and exploitation. To mitigate risk and drive recurring revenue, modern MSPs must transition from basic IT support to comprehensive cybersecurity managed services, integrating risk-based vulnerability management,[…] Read
Have you ever received a text from a family member claiming they have a new number and/or asking for some money? Or what about an urgent email from your manager requesting a password, payment information or access to a confidential document that you know they should probably already be able to get into? Even if[…] Read
Published by David Benson, Sharp Business Systems UK Plc
Finance teams handle some of an organization’s most sensitive information, from payment details and payroll data to banking records, vendor information, contracts, and financial forecasts. That makes them an attractive target for cybercriminals. A compromised Microsoft 365 account or convincing phishing email can potentially lead to unauthorized payments, stolen credentials, data exposure, or access to[…] Read
Quick answer: For a small business, a CMMC Level 2 certification assessment alone typically starts around $110,000 to $120,000, recurring every three years, following the requirement for two assessors per assessment under the 48 CFR rule. On top of that, ongoing compliance services commonly run $60,000 to $100,000 or more per year, and most companies[…] Read
Published by Austin Justice, Justice IT Consulting LLC
Smaller businesses naturally have weaker security protocols and limited budgets than bigger organisations. As a result, they’re more likely to suffer data breaches and cyberattacks, as they are easier to target. That’s why it’s crucial for small businesses to take cybersecurity seriously. Cyber Essentials helps businesses protect themselves against potential threats. This guide explains everything[…] Read
In today’s digital landscape, information is one of the most valuable assets any organisation owns. From customer records and financial data to intellectual property and operational systems, businesses rely on secure information to operate effectively and maintain trust with their customers. As cyber threats continue to evolve and become more sophisticated, organisations are placing greater[…] Read
Published by Jennifer Montehermoso, Qbit IT Solutions
Quick answer: Yes, when implemented honestly. NIST 800-171 is considered more effective at actually keeping bad actors out than many comparable frameworks specifically because it’s prescriptive: it tells you exactly what has to be in place (like requiring FIPS encryption for CUI or maintaining an authorized user list) rather than leaving you to design your[…] Read
Published by stacey flores, Justice IT Consulting LLC
Medical practices hold the most intimate details of human lives, from diagnoses and treatments to genetic markers. Because patient data directly impacts patient safety, healthcare providers face an immense responsibility. This high-stakes environment makes the industry a primary target for cybercriminals. This threat puts small to mid-sized healthcare organizations in a difficult position. Many operate[…] Read
