Fed Update

Fed Roundup: March 2022

DISA News Announcements: DISA’s Cybersecurity & Analytics Directorate will provide cybersecurity awareness refresher training courses over the next few weeks DISA improves Enterprise Email Security Gateway STIG Updates: MongoDB Enterprise Advanced 4.x STIG Motorola Solutions ...

Read more

Fed Update

FED Roundup: July 2021

Fed Update

FED Roundup: June 2021

DISA News None STIG Updates Samsung SDS EMM Zebra Android 10 NIST News Announcements: None Special Publications & Updates: Draft NISTIR 8270, "Introduction to Cybersecurity for Commercial Satellite Operations" NIST Cybersecurity White Paper, "Combinatorial Coverage ...

Read more

Cybersecurity Executive Order

In an effort to improve the United States' ability to identify, deter, protect against, detect, and respond to malicious actors and attacks, the President of the U.S. has issued a new Executive Order (EO) to ...

Read more

Automation

Further Automation Within The CMVP

The Cryptographic Module Validation Program (CMVP) is a part of the National Institute of Standards and Technology (NIST) which operates under the Department of Commerce.  The CMVP's role is to promote the use of validated ...

Read more

Fed Update

FED Roundup: January 2021

DISA News DISA continues to work towards implementation of the DISA Strategic Plan FY 2019-2022 Version 2, released in December of 2020. Assessment Requirements for IT services will now be placed in DISA contracts as ...

Read more

Fed Update

FED Roundup: November 2020

DISA News DISA's Global Video Services – Unclassified expands to include voice dial-in capability STIG Updates DISA has released the Juniper SRX for Anisble Automation Package DISA has released the Canonical Ubuntu 18.04 STIG DISA ...

Read more

Algorithm Transition Dates

Recent Implementation Guidance (IG) from NIST could impact vendor algorithms. The following overview has been created to summarize those critical dates and associated algorithms. AES CBC-CS1, CBC-CS2, CBC-CS3 (IG A.12) Until Sep. 1, 2020, implementations ...

Read more

COVID-19: Corsec Continues to Operate

In response to the COVID-19 pandemic around the globe, Corsec staff have transitioned to a telework policy to ensure the health and wellbeing of our staff, their family, and the community. We feel fortunate to ...

Read more

U.S. Gov

FED ROUNDUP: JULY 2019

DISA News DISA Awards SETI IDIQ to 23 Small Businesses DISA Releases 4 Year Strategic Plan NIST News Announcements: None Releases & Special Publications: SP 1800-17, Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor ...

Read more

U.S. Gov

FED ROUNDUP: JUNE 2019

DISA’s June News DITCO, DISA's contracting arm, reduces its enterprise acquisition services fee NIST’s June News Announcements: NIST announces Open Security Controls Assessment Language (OSCAL), Version 1.0.0 - Milestone 1 has been released Releases & ...

Read more

Security Certification Maintenance

As you release new versions of previously certified and validated products, it is crucial that you develop a security certification maintenance plan to keep up with the evolution of your technology. Corsec’s Maintenance and Compliance ...

Read more

Common Criteria Schemes: Tips for Making the Right Choice

So many decisions, so little time. You’ve heard—and likely experienced—this mantra. And if you read this blog regularly, you’ve probably picked up on the fact that security validations involve making a whole host of decisions. When pursuing Common Criteria certification, one often perplexing, yet critical decision I hear people lament…