Triad Recap: Keeping You Up to Date with All the Latest News

Welcome to the Triad Recap, your go-to source for the most recent developments in cybersecurity and compliance. In this edition, we cover critical updates on router security concerns, emerging email scams, and essential information on the Cybersecurity Maturity Model Certification (CMMC) 2.0. Stay informed to keep your business secure and compliant.

U.S. Investigates Potential TP-Link Router Ban

The U.S. government is currently investigating TP-Link, a prominent router manufacturer, due to security concerns stemming from its Chinese origins. The Departments of Commerce, Defense, and Justice are assessing potential risks associated with TP-Link routers, including vulnerabilities that could be exploited by state-sponsored hackers. While no deliberate misconduct has been identified, the probe aims to determine the safety of using TP-Link devices within U.S. networks. In response, TP-Link has restructured its operations, relocating headquarters to California and Singapore and shifting manufacturing to Vietnam, to address these concerns. Users are advised to regularly update device credentials and firmware, enable firewalls and Wi-Fi encryption, and consider alternative router brands with strong security reputations.

Read the full article here: The US Is Considering a TP-Link Router Ban—Should You Worry?

Urgent Warning: Sophisticated Gmail Scams on the Rise

Gmail users are being alerted to a new wave of sophisticated scams designed to steal personal information and hijack accounts. Cybercriminals are now employing artificial intelligence to craft highly convincing voice and video messages, making fraudulent communications more deceptive than ever. A recent phishing scam involves fake login pages that closely mimic legitimate ones, even bypassing two-factor authentication. Google advises users to perform critical “spot checks” by double-checking email details, verifying sender addresses, and being cautious of messages that create a sense of urgency. Reporting suspicious emails as spam is also recommended to help protect yourself and others from these evolving threats.

Read the full article here: Gmail users given urgent ‘spot check’ warning in face of two ‘devastating’ scams that steal passwords & raid accounts

Understanding CMMC 2.0: Key Changes and Preparation Strategies

The Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) program has undergone significant revisions with the release of CMMC 2.0. The updated model streamlines the original five levels to three, aligning each with recognized standards to reduce complexity for contractors. Key changes include:

• Level 1: Focuses on basic cyber hygiene with 17 essential practices, applicable to companies handling Federal Contract Information (FCI).

• Level 2: Aligns with the 110 security requirements of NIST SP 800-171, targeting companies managing Controlled Unclassified Information (CUI).

• Level 3: Incorporates additional requirements from NIST SP 800-172 for contractors involved in critical defense programs.

To prepare for CMMC 2.0 compliance, organizations should conduct thorough self-assessments, implement necessary security controls, and maintain detailed documentation. Engaging with certified third-party assessment organizations (C3PAOs) can provide valuable guidance throughout the compliance process.

Read the full article here: CMMC 2.0: Understanding Key Changes and Preparing Your Organization

CMMC Readiness: Essential Considerations for Compliance

Achieving CMMC readiness is crucial for organizations aiming to secure Department of Defense contracts. Key considerations include:

• Understanding Current Requirements: Familiarize yourself with existing cybersecurity clauses in federal contracts, such as FAR 52.204-21 and DFARS 252.204-7012, which mandate specific safeguarding measures for systems handling federal information.

• Implementing Necessary Controls: Ensure compliance with NIST SP 800-171 by adopting required security controls and addressing any identified gaps.

• Preparing for Assessments: Develop comprehensive documentation and evidence to support your cybersecurity practices, facilitating smoother assessments by C3PAOs.

Proactive preparation not only enhances your security posture but also positions your organization favorably for future contract opportunities.

Read the full article here: CMMC Readiness: Considerations for preparation, assessment, and continued compliance

How Triad InfoSec Can Assist Your Business

Navigating the complexities of cybersecurity compliance can be challenging. Triad InfoSec is dedicated to helping businesses prepare for CMMC audits, ensuring compliance, and optimizing cybersecurity strategies. Our services include:

• CMMC Audit Preparation: Guiding your organization through the necessary steps to achieve CMMC certification.

• MSP Partnerships: Collaborating with Managed Service Providers to ensure your business remains compliant while reducing cyber insurance premiums.

• Comprehensive Cybersecurity Solutions: Offering a range of services tailored to meet all your cybersecurity needs.

Partner with Triad InfoSec to secure your business’s future.

Contact us today

Stay vigilant and proactive in addressing cybersecurity challenges to protect your business and its valuable assets.