Dr. Jeff Baldwin, CEO of Space Coast Cyber and CMMC Lead CCA and Provisional Instructor facilitated the Engineering Trust table at the 2025 CS5 East Conference in National Harbor, MD. Resources: Information Assurance Technical Framework IATF 3.1 (NSA, 2002) NIST SP 800-64 R2: Security Considerations in the System Development Life Cycle (2008) NIST SP 800-160 Volume 1 Rev 1: Engineering Trustworthy Secure Systems (2022) NIST SP 800-160 Volume 2 Rev 1: Developing Cyber-Resilient Systems: A...

You may have heard a vendor say they are FedRAMP Moderate Equivalent (FRME), but what does that really mean, and how do you know if they...

Introduction In the context of CMMC, can an OSA inherit all of Physical and Environmental (PE) security controls from a Cloud Service...