Blog
Understanding the Cybersecurity Maturity Model Certification (CMMC)
What you need to know about getting CMMC certified as a contractor within the Defense Industrial Base (DIB).
January 29, 2024
Head of GRC
Kyle Morris is a highly experienced Governance, Risk, and Compliance (GRC) professional with over 12 years of expertise in information security, IT auditing, and regulatory compliance. As the Head of GRC, he is a Certified Information Systems Auditor (CISA) and an ISO 27001 Certified Lead Implementer, with a Bachelor of Science degree in Computer Science.
Kyle began his career as a Senior Analyst at a Big Four IT audit firm, gaining valuable experience across various industries like banking, mining, manufacturing, and healthcare. He is recognized for his deep knowledge and hands-on experience in leading organizations through key security and privacy frameworks including SOC 1, SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS, NIST, NIS2, CSA STAR, CMMC, and DORA. Kyle is a trusted expert known for simplifying complex risks. He helps businesses around the world build effective, scalable compliance programs and foster strong, risk-aware cultures.
What you need to know about getting CMMC certified as a contractor within the Defense Industrial Base (DIB).
In this piece, we’re talking about SOC 2 templates and their role in making the compliance process far less complicated.
Here’s everything you need to know about CMMC levels, and how businesses can ensure compliance with the right level.
Let’s delve into the world of NIST CSF and ISO 27001, and discover which one aligns best with your organization’s unique cybersecurity needs.
HIPAA and HITRUST are two frameworks that are commonly compared because they are used in the healthcare industry.
A HIPAA audit log, also known as an audit trail, is a chronological record of access to electronic protected health information (ePHI).
To help you get the most out of the numerous benefits HIPAA can provide your business, here are our ten go-to tips for HIPAA compliance.
To help you find the ideal security compliance software for your organization, here’s our checklist of top ten things to look out for.
In this article, We’ll share everything you need to know about SOC 1 requirements so that you can ace your audit with confidence.
The change management process provides a higher level of control and consistency within the Software Development Life Cycle (SDLC).
This checklist will help you make sure you’ve covered all your ISO 27001 bases.
Audit exceptions are often an acceptable part of the audit process.
