Blog

CyberChat with Chris Newborn from the DAU

We had a great CyberChat session yesterday with Chris Newborn from the Defense Acquisition University – lots of lively discussion and Q & A. I spoke with Chris last evening and he is taking our concerns to Jesse Salazar, the Deputy Assistant Secretary of Defense for Industrial Policy. Mr. Salazar comes from the private sector, […]

CyberChat Workshop # 12

CyberChat #12 included information about the practices in the System & Information Integrity CMMC domain. We also discussed how to prepare for a CMMC assessment. Links to recording and presentation below. CyberChat #12 Presentation CyberChat #12 Recording

CyberChat Workshop #11

In today’s CyberChat we discussed the following CMMC Domains: Risk Management, Security Assessment, Situational Awareness, System & Communications Protection. We also talked about how to vet cloud service providers, how to handle tele-working securely and how to secure mobile devices like smart phones. Presentation and recording below. Next week we will discuss the final CMMC […]

CyberChat Workshop #10

Happy St. Patrick’s Day! CyberChat #10 focused on the following CMMC domains: Media Protection, Personnel Security, Physical Security and Recovery. We had a great discussion about how the technical jargon in CMMC makes it difficult for the lay person to understand, and therefore become compliant. We also discussed the responsibility of software/tool providers to use […]

CyberChat Workshop # 9

In today’s CyberChat we worked on practices in the following CMMC Domains: Configuration Management, Identification & Authentication, Incident Response and Maintenance. I encourage everyone to thoroughly review the information on the Incident Response Template link – Amira Armond provides a thorough explanation of how to plan and train for potential cybersecurity incidents, as well as […]

CyberChat Workshop #8

We had lots of discussion in today’s CyberChat! DARPA just issued a CUI Guide for one of their programs. Includes lots of great information. We hope the rest of the DoD uses the guide as a model. DARPA CUI Guide If you need guidance on developing your System Security Plan, take a look at this […]

CyberChat Workshop #7

We have completed all the compliance prep work and are now diving into the CMMC Level 1 practices. Today we talked about how to use the CMMC Level 1 in a Box tool and discussed the practices in the Access Control Domain. CyberChat #7 Recording CyberChat #7 Presentation

CyberChat Workshop #6

Today we discussed how to perform a gap assessment to the 110 controls in NIST SP 800-171 using the DoD Assessment Methodology. Recording and slides below. CyberChat #6 Workshop Recording CyberChat #6- presentation- 2.17.21 See you all next Wednesday at 11:00! Laura

CyberChat Workshop #5

This week we discussed how to narrow audit scope to minimize costs and reduce risk. Links below to the recording, slides and Compliance Forge Scoping Guide. CyberChat #5- presentation- 2.10.21 Compliance Scoping Guide CyberChat #5 Workshop Recording See you all next week!

CyberChat Workshop #4

Today we discussed cybersecurity risks and how to develop a risk analysis. Performing a risk analysis is a critical step in determining the cybersecurity controls on which to focus. Many factors influence an organization’s risk profile, so there is no one-size-fits-all risk mitigation program. Good luck with your risk analysis, and don’t hesitate to contact […]

CONTACT US

Main Point of Contact:

Laura Rodgers
Director of Cybersecurity Practice
Secure Computing Institute
EB II, 2240B
NC State University
ldrodger@ncsu.edu

(o) 919-515-5063

(c) 828-734-0053
How to best utilize CyberNC.us: The CyberNC.us website was created to provide North Carolina companies with one location to find all the information they need to develop a cybersecurity compliance program that is compliant with Department of Defense regulations.

The most effective way to utilize the website is to follow the steps below:
1. Understand the regulations. Click on the Cybersecurity Regulations tab and review the information about each of the regulations.
2. Understand the data. Click on the FCI/CUI tab for detailed information about Federal Contract Information and Controlled Unclassified Information, then review the Cybersecurity Overview presentation.
3. The information on the Where to Start tab will help businesses determine which regulation with which they must comply, as well as the level of compliance that is required.
4. The DFARS tab contains information about compliance with DFARS 252.204-7012 and the new DFARS Interim Rule.
5. The CMMC tab contains information about CMMC 2.0 and includes FAQs and resources.
6. The Training tab provides information about resources businesses can use to train their employees.
7. The Partners tab contains links to the websites of the I3C partner agencies.
The NCMBC and the I3C are not representatives of the DoD or the CMMC Accreditation body. This website is meant to be a community resource for cybersecurity compliance information.

Copyright 2020, North Carolina Military Business Center. All Rights Reserved.