Jaime Martinez

CMMC Level 2 requires implementation of 110 security practices aligned with NIST SP 800-171, far exceeding basic cyber hygiene requirements. Defense contractors must demonstrate documented policies, procedures, and technical controls across 14 domains including access control, incident response, and system monitoring before third-party assessors conduct certification audits. https://lnkd.in/gSnD5Pa6 #CMMCLevel2 #NIST800171 #CybersecurityAssessment

1

ESN Recognized Among DOD’s Top 250 Technology and Support Services Providers for FY2024 WOODBRIDGE, VA – Engineering Services Network, Inc. (ESN), a leading provider of engineering, cyber, and software solutions based in Woodbridge, VA, proudly announces its inclusion in the 2025 OrangeSlices Vanguard DOD 250. This prestigious recognition highlights the most successful firms supporting the U.S. Department of Defense (DoD) through federal services contracts during Fiscal Year 2024. The list, published by GOVTECH Connect in collaboration with HigherGov—a leading provider of federal market intelligence and business development tools—identifies companies based on total obligated contract dollars (including both prime and reported subcontractor awards) across targeted NAICS and PSC codes. Selected firms are recognized for their proven performance, reliability, and measurable impact across the DoD's technology and support services sectors. “ESN is honored to be recognized by these organizations and will continue to drive innovative engineering and cyber solutions to our end customers,” said Douglas Lopez, President & COO of ESN and a service-disabled U.S. Marine Corps veteran. “Over the past 30 years, ESN has built a strong reputation for delivering mission-critical support and tailored solutions to defense and federal clients, playing a vital role in advancing national security through technology innovation and operational excellence.” ESN’s inclusion in the Vanguard DOD 250 reinforces its continued commitment to delivering exceptional results and value in support of the Department of Defense’s evolving mission needs.

25

NIST is bringing mission-critical training to #UTAC 2025. Don’t miss hands-on courses led by the National Institute of Standards and Technology (NIST), covering: - Certification courses for UxS operators - Unmanned systems performance standards - Best practices for integrating new tech into operations Whether you’re deploying UAS, UGVs, or advancing interagency comms, NIST’s instruction provides the foundation for confident, standards-driven decision-making. #UTAC2025 #TrainLikeYouOperate #NIST #PublicSafetyStandards #RoboticTeaming #UAS #UGV #TacticalTraining #TechIntegration #OperatorDevelopment #MissionReady #DefenseInnovation

7

Most defense contractors don't fail CMMC Level 2 certification because they "can't do cybersecurity". They fail because they walk into the assessment unprepared. C3PAOs consistently report high rates of false starts—organizations who thought they were ready but lacked a defensible scope, couldn't demonstrate controls in action, or misunderstood partner responsibilities. Our new CMMC Level 2 Assessment Guide, built on real C3PAO insights, shows exactly how assessors think, what they expect, and how to avoid the most common readiness pitfalls. Get the guide: https://bit.ly/4c3Xinm

13

1 Comment

🔥 RMF as we know it isn’t going to cut it. By FY 2027, every federal agency has to be operating under a Zero Trust Architecture (ZTA). That’s not a minor compliance exercise — it’s a fundamental shift. And if the revamped RMF doesn’t evolve with it, we’re just pushing paper while adversaries move faster. What needs to happen: • ZTA baked in — not an afterthought, but the baseline. • Cloud assessments that keep pace — smarter, quicker, more risk-driven. • Real DevSecOps/CI-CD guardrails — because software delivery isn’t slowing down for security. This is a chance to turn RMF into more than paperwork — to make it the framework that actually drives resilience, agility, and mission success. Looking ahead, the organizations that start modernizing RMF today won’t just clear the 2027 bar — they’ll set the standard for secure digital governance over the next decade. 👉 What’s your take — is RMF ready to step up, or does it risk being left behind?

5

🚨 Exciting News from Sedulous Consulting Services 🚨   Sedulous Consulting Services is proud to announce that we have been awarded a contract by Headquarters Marine Corps, DCI IC4 Cybersecurity Compliance Branch, to deliver instructor-led, in-person #Cybersecurity Risk Defense #training for Risk Management Framework (RMF) analysts.   This training, customized for the Marine Corps’ unique instantiation of eMASS (Enterprise Mission Assurance Support Service), will: ✅ Strengthen RMF analysts’ ability to analyze and evaluate cybersecurity risks ✅ Enhance mission assurance through improved risk determination and recommendations ✅ Provide tailored instruction, practical scenarios, and hands-on exercises focused on Marine Corps cybersecurity needs   We are honored to support the Marine Corps’ #critical mission of #safeguarding networks, systems, and data through advanced training and knowledge transfer.   This award is another milestone in Sedulous' commitment to delivering mission-focused #RMF solutions and advancing the skills of the DoD workforce.   #Sedulous #Cybersecurity #RMF #eMASS #MarineCorps #DoD #MissionAssurance #TrainingAndDevelopment Omar Dennis, CCISO, CISSP, PMP, CHP James A Villa, PMP Charles A. Anderson

55

7 Comments

HSP Adds FedRAMP Assessment and ATO Readiness Services [10/20/2025] — HSP has expanded its cybersecurity and compliance portfolio to include FedRAMP Assessment and Authorization to Operate (ATO) Readiness Services. These services encompass both legacy and cloud-native security assessments designed to evaluate and manage the ATO process, ensuring automated monitoring and enforcement of commercial security standards that meet federal information system requirements. HSP’s CISO team, each with over 20 years of quality, compliance, and cybersecurity leadership, helps organizations streamline their path to FedRAMP authorization—driving efficiency, reducing costs, and accelerating time to compliance. Our experts partner with clients to develop, document, and achieve FedRAMP milestones, managing the full lifecycle of readiness and audit activities to ensure success across federal and highly regulated commercial environments.   HSP Regulation and Standards Alignment (2025) HIPAA – including the SRA review; GDPR (UK and EU) and Transfer Impact Assessment; Australian Privacy Principles; California Consumer Privacy Rights Act (CCPA and CPRA); Cloud Controls Matrix (CCM); NIST 800-53r5, NIST 800-171, NIST 800-63; Consensus Assessment Initiative Questionnaire (CAIQ); Digital Operational Resilience Act (DORA); CAP AI Assessment (EU AI Act); Vendor Security Alliance (VSA); CIS Level 2 and STIG configuring standards; Higher Education Community Vendor Assessment (HECVAT)

4

#DYK #CDSE has an Information System Security Manager toolkit? Find resources on threats to cleared facilities, safeguarding, system and network security, and more. https://lnkd.in/gUnJDZ5A #DCSA #SecurityManager #SecurityTraining #Warfighter

17

NETCOM pushes global integration to secure Army’s cyber edge January 29, 2026, U.S. Army Network Enterprise Technology Command https://lnkd.in/eXupAG7S Fort Huachuca, AZ — The United States Army Network Technology Command (NETCOM) convened its annual Senior Leadership Development conference at NETCOM headquarters on Fort Huachuca, drawing senior leaders from across the enterprise, subordinate units, and global posts. Hosted by NETCOM Commanding General Major General Jacqueline “Denise” McPhail, the gathering focused on the command’s expanding role in enabling multi-domain operations through a globally integrated information technology platform. The conference opened with remarks from Army Cyber Command (ARCYBER) Commanding General, Lieutenant General Christopher Eubank, who framed ARCYBER’s ongoing transformation as a decisive step in “setting the land domain through the cyber domain.” Eubank emphasized how tight integration between cyberspace operations and land forces is reshaping the battlespace, and how commands like NETCOM are central to that evolution.

15

Cyber security is not going away. The DOD is setting the stage for how to protect the nation and the level of visibility leaders should have for their data. Take a look at our partner’s (Lifeline Data Centers, LLC) latest article on CMMC title 48.

1

Closing the Gaps: CUI Identification & Monitoring for CMMC Compliance The House Armed Services Committee’s amendment to H.R. 3838 makes one thing clear: safeguarding Controlled Unclassified Information (CUI) isn’t just about compliance—it’s about national security. Key takeaways for the Defense Industrial Base (DIB): 🔹 Accurate CUI identification is the foundation of compliance. 🔹 One-time audits aren’t enough—continuous monitoring is becoming a must-have. 🔹 The DoD is shifting toward outcome-driven, risk-based cybersecurity. Bottom line: Contractors that combine precise CUI discovery with ongoing monitoring will be audit-ready, compliant, and better equipped to protect sensitive data. 👉 Read the full blog: https://lnkd.in/e9_4fw_t #CMMC #CMMCCompliance #CUIMonitoring #CUIIdentification #CUISecurity #DFARS #NDAA #DefenseContractors #Cybersecurity #ContinuousMonitoring #NationalSecurity #CyberCompliance #RiskManagement

1

The National Institute of Public Safety (NIPS) has unveiled a new series of BSIS-certified training programs, designed to help California security professionals meet licensing requirements and enhance operational readiness. https://hubs.li/Q03xY3zY0

Boost your cybersecurity skills with the GIAC Security Leadership (GSLC) Preparation Certificate, designed for Florida state and local government employees. This self-paced course helps you learn how to manage and improve cybersecurity systems, focusing on protecting, detecting, and responding to security risks. Earn a Certificate of Completion from the University of South Florida to show your expertise and leadership in cybersecurity. Read more: https://lnkd.in/d5EaAYmB #Cybersecurity #LeadershipTraining #GSLCPrep #StateAndLocalGovernment #CybersecurityLeadership #ProfessionalDevelopment #USFEducation #OnlineLearning #CybersecuritySkills #GovTech

10

If you’re thinking about getting into cybersecurity, this is such a great opportunity! Cyber Florida’s CyberWorks program gives you hands-on training + a path to earn your CompTIA Security+ certification. Definitely worth checking out! Also, if you know anyone transitioning careers, veterans, or first responders, share this with them. #CyberFlorida #Cybersecurity #CareerGrowth #TechCareers #Upskill #CyberWorks

3

Defense contractors aren't the only ones who need to implement NIST cybersecurity requirements for CUI. The big question has always been whether other agencies would require proof of implementation via the CMMC program. The GSA just revised their process for assessing nonfederal systems handling controlled unclassified information and it's way closer to NIST's Risk Management Framework than CMMC. Get the full scope in this week's episode ⬇️

34

6 Comments

The U.S. Army is enhancing cyber-joint task force operations through the Cyber JIATF initiative—integrating Army and DoD networks for unified cyber defense, rapid response, and shared situational awareness in contested environments. https://lnkd.in/gCdjvFKE

1