Review Your IT Strategy Plan and IT Planning Process
By now, there are probably very few out there who haven’t felt the negative impact of the Coronavirus pandemic – something that is still keeping roughly a third of the world’s population on mandatory lockdown with no end in sight. In addition to dealing with a workforce that is suddenly remote, you’re also likely coming up against a variety of budgetary freezes that seem like they couldn’t have come along at a…
Continued
How to Maintain NIST 800-171 & DFARS Compliance as a Contractor With CUI
With the recent news that DFARS compliance requirements will start being enforced, we’ve seen a significant increase of questions concerning the role and application of ‘Government’ licensing- such as Office 365 Government or AWS GovCloud- for contractors possessing Controlled Unclassified Information (CUI). Aside from adhering to DFARS compliance itself, Government licensing- notably for Office 365 Government- is extremely expensive from both a subscription and implementation standpoint, and in turn, an…
Continued
What is CMMC? The Complete CMMC Compliance Guide
Believe it or not, the day that many of us thought would never arrive is finally here: the Department of Defense is actually going to start enforcing the CMMC or DFARS/NIST 800-171 compliance requirements and if the conversations we’ve been having with our managed IT services clients are of any indication, there’s certainly a lot of surprise- and dread- to go around. As a direct result of these updates and…
Continued
Two Birds, One Stone: Here’s How to Address ISO 27001 and 13845 at the Same Time
As someone who has been providing IT support to SMBs for nearly 30 years, there’s one topic that seems to come up with my clients over and over (and over) again: Compliance. We all understand that compliance is important – there’s really nobody on the other side of that issue. But where people start to get frustrated has to do with how unclear compliance requirement can sometimes be. I was…
Continued
What Is ISO 27001?: Information Security Certifications
This article was written with contributions from Timonthy Woodcome, director of NQA, a leading Global Certifications Body as well as the technical staff here at Technical Support International. Also officially known as ISO/IEC 27001:2013, ISO 27001 is a specification for a set of policies and procedures that outlines all of the legal, physical and even technical controls that make up a business’ information risk management process. This type of framework…
Continued
Firewall Management: Log Monitoring and Auditing Basics
As part of my role at TSI, I meet with a wide range of different businesses. More often than not, when I ask about their current log monitoring efforts, people aren’t even sure what this really does, and are surprised to find how unequipped they’re cyber security strategy is. In this piece, I’d like to go into detail on what firewall log monitoring is, what it does and why it’s…
Continued
Cyber Security Policy Starter Kit:
10 Critical Policies That Every Company Should Have in Place
