The Department of Defense plans to roll out the Cybersecurity Maturity Model Certification program in four phases over three years.

The OpenID Foundation has published two new papers proposing a standardized framework to help U.S. financial institutions accept mobile driver’s licenses (mDLs) and other verifiable credentials for ...

NIST compliance has become essential for any company looking to work with the federal government. It demonstrates that a business is committed to protecting sensitive information and adheres to the ...

Compliance is a prerequisite for growth and trust for companies of every size, especially those selling into regulated or ...

In Part 1, we explored the background of CMMC, discussed the timeline of its implementation and laid the groundwork for why ...

October 03, 2025 - The term "dual-use technology" refers to innovation with both civilian and military applications. For decades, the epicenter of this innovation was unmistakably American. From DARPA ...

NIST is a non-regulatory federal agency, and the CSF is voluntary. The CSF does not directly form the basis for any formal regulations or regulatory action. However, it heavily influences evolving ...

The Pentagon has issued the final Defense Federal Acquisition Regulation Supplement, or DFARS, rule implementing the contractual requirements of the Cybersecurity Maturity Model Certification, or CMMC ...

The National Institute of Standards and Technology (NIST) has finalized a major revision to its Security and Privacy Controls for Information Systems and ...

Addressing the ongoing patch management problem requires more finessing, especially to protect the software supply chain. The US National Institute of Standards and ...

Since NIST Special Publication 800-171 Revision 2 is now available as a standard in Security Hub we would like to deploy it using CodePipeline but get this error: ...