As we enter 2021, the Cyber Threat Landscape will for sure be an evolving one, especially when it comes to Data Privacy. Although the GDPR and the CCPA have not been fully enforced yet, it is expected that it will be this year. Another area which is now getting serious attention is that of the Cybersecurity Maturity Model Certification, or the CMMC.

This is where the Defense Industrial Base and their respective sub-contractors will have to be certified to a certain Maturity Level before they will be allowed to handle sensitive datasets, such as those of the Controlled Unclassified Information (CUI) and the Federal Contract Information (FCI) datasets.

In this blog, we further examine one particular tool that can be used to help to achieve compliance, especially if you are defense contractor.

The Tool

In the business world, M365 and Microsoft Azure are widely used. But from within these platforms, there are also tools available that can help your organization come to compliance for the CMMC, which will then allow you to bid for various jobs. One of these is known as the “Microsoft Product Placemat for the CMMC”.

In a holistic sense, this is a single view dashboard that shows you the security controls you need to implement in your business regarding your progress towards CMMC certification when you are making use of Microsoft 365 Security Suites. In this view, the practices that come from the Microsoft Coverage and the Shared Coverage are provided.

The latter refers to those portions of Microsoft Azure that you are currently using to come into CMMC compliance, and where more input is needed on your side, especially when it comes to configuration settings and changes.

Also, in this regard, expert tips and advice are also provided to help you refine and hone any tasks or objectives that you may be currently working on. In addition, you can also purchase the other CMMC tools that your organization may need to use to get that certification.

An example of the CMMC Placemat is seen in this illustration:

(SOURCE: 1).

Conclusions

It is important to note that the Microsoft CMMC Placemat has just been released for public preview in January 2021 and is available for download.  If you have any questions about this, or the CMMC in general, please contact us today.

Sources

  • https://techcommunity.microsoft.com/t5/public-sector-blog/microsoft-cmmc-acceleration-program-update-october-2020/ba-p/1825724