Dr. Jeff Baldwin, CEO of Space Coast Cyber and CMMC Lead CCA and Provisional Instructor facilitated the Engineering Trust table at the 2025 CS5 East Conference in National Harbor, MD. Resources: Information Assurance Technical Framework IATF 3.1 (NSA, 2002) NIST SP 800-64 R2: Security Considerations in the System Development Life Cycle (2008) NIST SP 800-160 Volume 1 Rev 1: Engineering Trustworthy Secure Systems (2022) NIST SP 800-160 Volume 2 Rev 1: Developing Cyber-Resilien

You may have heard a vendor say they are FedRAMP Moderate Equivalent (FRME), but what does that really mean, and how do you know if they...

Introduction In the context of CMMC, can an OSA inherit all of Physical and Environmental (PE) security controls from a Cloud Service...

With the new CMMC rule finalized in 32 CFR Part 170 the questions around how and when to use Plan of Action and Milestones (POA&M) have...