When a solopreneur reads NIST-SP-800-171 physical security controls you feel like folks protect Fort Knox. Security badges, guards, cameras. You do not have any of those. You run a small company from home. You have one laptop, a cloud service provider, and a household full of …
soloprenuer
-
-
One Person, Many Roles: Building a NIST SP 800-171 Rev. 3 Awareness and Training Program
If you want to survive NIST-SP-800-171 compliance as a solopreneur you need to think small. A one-person company does not need a learning management system. You do not have to film a library of animated phishing videos, or hire a full-time training manager to build a defensible …
-
There Can Only Be Two: The Single-User CMMC Company
A one-person company rarely wants two complete technology environments. Every additional device, mailbox, account, security tool, and login creates more work for the same person who already serves as owner, contracts manager, security officer, bookkeeper, and technical staff. It …
-
The One-Laptop Security Department
Hats. We all have many, but for a small business owner you wear them all at the same time. This includes running your Security Program (unless, and you should, farm work out to an External Service Provider). CMMC isn’t a framework or a standard. You need a program. A one …
-
Scoping out Costs of Solution Architecture
For many small entrepreneurs the cost of CMMC drives your scope. You may engineer a solution that allows you to buy inherited solutions so you do not have to build every security control yourself. Microsoft GCCH will always have lower lifetime costs, but not every contractor can …
-
One Laptop Does Not Need an Enterprise Security Program
A one-person company struggles to prepare for CMMC. Often, folks begin in the wrong place. All month long I am focusing on how a single-user company can create controls that meet NIST SP 800-171 security requirements and pass a CMMC assessment using the NIST SP 800-171A …
-
CMMC for a Company of One: Building a Business Not a Burden
If you are a founder, independent consultant, or owner of a very small defense contractor, NIST SP 800-171 feels overwhelming. You stare at the CMMC scoping guide and know someone wrote it for a company much larger than yours. You may have one employee, one laptop, no server …
-
Can I Walk Alone? Vulnerability Scanning and NIST 171
Often times for small businesses it feels as if NIST-SP-800-171 does not scale down. It seems to protect the confidentiality of Controlled Unclassified Information the Government built an overlay, meant for large organizations, from NIST-SP-800-53 For example, small and …