Reference Docs

Begin Now

Live Chat

References

Resources

CMMC Resources

cmmccertlogo

CMMC vs. 1.02 Released

CMMC Model Appendices 1.02

NIST Publications

CUINIST

NIST SP 800-171r2

(DRAFT) NIST SP 800-171B

NIST SP 800-171A

Assessing Security Requirements for Controlled Unclassified Information

NIST SP 800-41 Guide to firewalls and firewall policy

NIST SP 800-53 impact

NIST SP 800-46 Guide to enterprise telework, remote access, and bring your own device security.

NIST SP 800-50 Building and Information Technologyt moderate Security Awareness and Training Program

NIST SP 800-161 - Supply Chain Risk Management Practices for Federal Information Systems and Organizations

NIST SP 800-53 Joint task force transformation initiative: Accessing Security and Privacy Controls in Federal Information Systems and Organizations

NIST SP 800-53A Joint task force transformation initiative: Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment plans

=

NIST SP 800-53B Control Baselines and Tailoring Guidance for Federal Information Systems and Organizations

NIST SP 800-56A Recommendation for pair-wise key-established schemes using discrete logarithm cryptography

NIST SP 800-37 - Risk Management Framework for Information Systems and Organizations

NIST SP 800-41 - Guidelines on Firewalls and Firewall Policy

NIST SP 800-61 - Computer Security Incident Handling Guide

NIST SP 800-79-2 - Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI)

NIST SP 800-84 - Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities

NIST SP 800-92 - Guide to Computer Security Log Management

EA Report: The Cost of Malicious Cyber Activity to the U.S. Economy

NIST IR 7298 r3 - Glossary of Key Information Security Terms

NIST IR 7622 - Notional Supply Chain Risk Management Practices for Federal Information Systems

NIST IR 8011-3 - Automation Support for Security Control Assessments Software Asset Management

CNSSD 504 - How CNSSD 504 Defines UAM

FIPS 199 Standards for Security Categorization of Federal Information and Information Systems

NIST SP 1800-5 IT Asset Management

NIST SP 800-58 Security Considerations for Voiceover IP Systems

NIST SP 800-60-2 Guides for mapping types of information and Information systems to security categories

NIST SP 800-70 National Checklist Program for IT Products.

NIST SP 800-77 Guide to IPsec VPN's.

NIST SP 800-83 Guide to Malware Incident Prevention and Handling for Desktops and Laptops

NIST SP 800-97 Establishing Wireless Robust Security Networks

NIST SP 800-101 Guidelines on Mobile Device Forensics

NIST SP 800-111 Guide to Storage Encryption Technologies for End User Devices.

NIST SP 800-113 Guide to SSL VPN's

NIST SP 800-124 Guidelines for Managing the Security of Mobile Devices in the Enterprise.

NIST SP 800-125B Secure Virtual Network Configuration for Virtual Machine Protection

NIST SP 800-137 Information Security Continuous Monitoring for Federal Information Systems and Organizations

NIST SP 800-167 Guide to Application Whitelisting

NIST SP 800-181 Assessing Security Requirements for Controlled Unclassified Information

NIST SP 800-39 - Managed Information Security Risk

NIST SP 800-57 part 1 r4 - Recommendation for Key Management

NIST SP 800-63-3 - Digital Identity Guidelines

NIST SP 800-82 r2 - Guide to Industrial Control Systems (ICS) Security

NIST SP 800-86 - Guide to Integrating Forensic Techniques into Incident Response

NIST SP 800-94 - Guide to Intrusion Detection and Prevention Systems (IDPS)

Having Trouble Getting Your CIS Resources?

NIST IR 7316 - Assessment of Access Control Systems

NIST IR 7693 - Specification for Asset Identification 1

NIST IR 8053 - De-Identification of Personal Information

NIST IR 8149 - Developing Trust Frameworks to Support Identity Federations

CNSSD 505 - Supply Chain Risk Management

FIPS 200 Minimum Security Requirements for Federal Information and Information Systems

NIST SP 800-128 Guide for Security-Focused Configuration Management of Information Systems

NIST SP 800-12-An Introduction to Information Security

NIST SP 800-114 - Framework for Improving Critical Infrastructure Cybersecurity

NIST SP 800-123 - Guide to General Server Security

NIST SP 800-150 - Guide to Cyber Threat Information Sharing

NIST SP 800-115 Technical Guide to Information Security Testing and Assessment

NIST SP 800-16 - Information Technology Security

NIST SP 800-160 - Systems Security Engineering

NIST SP 800-18 Guide for developing security plans for federal information system

NIST SP 800-28 Guidelines on Active Content and Mobile Code

NIST SP 800-30 - Guide for Conducting Risk Assessments

NIST SP 800-32 Introduction to public key technology and the federal PKI infrastructure.

NIST SP 800-34 - Contingency Planning Guide for Federal Information System

SP 800-40 Guide to Enterprise Patch Management Technologies

NIST SP 800-57 part 2 - Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations

NIST SP 800-66 - An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule

NSIT SP 800-83 - Guide to Malware Incident Prevention and Handling for Desktops and Laptops

NIST SP 800-88 -NIST Special Publication 800-88, Revision 1: Guidelines for Media Sanitization

NIST SP 800-95 - Guide to Secure Web Services

NIST IR 7621 - Small Business Information Security: The Fundamentals

NIST IR 7694 - Specification for Asset Reporting Format 1.1

NIST IR 8074 v2 - Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity

CNSSI 4009 - Committee on National Security Systems (CNSS) Glossary

NIST SP 1800-21 Mobile Device Security: Corporate Owned Personally Enabled

CUI & CMMC

CUI

DODI 5200.48 Controlled Unclassified Information

Covered Defense Information & Cybersecurity Incident: DFARS 204.7300, 252.204-7012

32 Code of Federal Regulations (CFR), Part 2002, Controlled Unclassified Information

CUI Marking Handbook

DODI 5200.39 - Critical Program Information (CPI) Identification and Protection Within Research, Development, Test, and Evaluation (RDT&E)

Title 40 U.S. Code, Sec. 11331, Responsibilities for Federal information systems standards. 2017 ed

Office or Management and Budget, Managing Information as a Strategic Resource

Controlled Unclassified Information (CUI): 48 CFR 252.204-7012; 32 CFR 2002.

CUI Registry

Information Security Oversight Office (ISOO) CUI Notices

CISA SSP DIB - Defense Industrial Base Sector-Specific Plan An Annex to the National Infrastructure Protection Plan

DODI 500.02- Operation of the Defense Acquisition System

Title Code 44 U.S. Code Sec 3554, Federal Agency Responsibilities

Destroying Controlled Unclassified Information (CUI) in paper form

ISO 27001

Executive Order (EO) 13556, Controlled Unclassified Information

Navy: NMCARS 5204.73 for Safeguarding Covered Defense Information and Cyber Incident Reporting.

Federal Information Security Modernization Act

IT Sector baseline Risk Assessment

Executive Order 13526 Classified National Security Information

Export Control

exportcontrol

TAR Resources

=

Specified Export Controlled Data

15 CFR 736, Supplement No. 2;
42 USC 2077(a);
15 CFR 718.3;
22 CFR 126.10(b);
15 CFR 748.1(c);
15 CFR 760.5(c);
32 CFR 250.9

EAR Resources

CUI Registry

=

Basic Export Controlled Data

50 USC 4614(c);
13 USC 301(g);
42 USC 2156;
42 USC 2168(a);
22 CFR 124.9(a)(5);
50 USC 4605(l)(5);
10 USC 130(a);
32 CFR 250.4(a)

Cybersecurity

cybersecurity

2018 Costs of Insider Threats: Global(Ponemon)

2019 Cyber Mega Trends (Poneman /Raytheon)

Cyber Risk in Advanced Manufacturing (Deloitte)

2019 Data Breach Investigations Report (Verizon)

Digital Transformation

digitsltrans

Transform Your Organization Through Technology & Compliance

Contact Us Today!



Office

Dallas, TX



Call Us

817-796-6838

Process design and implementation that are unambiguously compliant.