Recent Posts

By now, anyone in the US Department of Defense supply chain should know about the new Cybersecurity Maturity Model Certification (CMMC). Knowing what to do about it is something else. The goal of CMMC is to utilize five maturity levels, ranging from Basic Cyber Hygiene to Advanced/Progressive cyber practices, to ensure information protection in the defense supply chain. A contractor’s maturity level will be used as a requirement for contract award. While a unified cybersecuri

Sending countless emails? Making unnecessary phone calls? If you’re tired of chasing vendors to submit your security assessment questionnaire, we hear you. Anyone tasked with leading or executing a vendor risk management program knows the administrative aspects can be a heavy lift. In most cases, it’s up to 80% of the workload! Regardless, it’s a critical function. Even slight oversights in your administrative plan or its execution can cause serious blind spots, increasing th

The sheer volume of third parties and suppliers that corporations now engage has manifested an unduly complex system of vendor security assessments. Additionally, more stakeholders, especially Senior Management and Boards, require insight into the risks and vulnerabilities that come from using outside suppliers. With different performance demands, varying regulatory obligations, and diverging levels of risk tolerance, the challenge of transparency and reporting can become a l