Matthew Titcombe

CEO at Peak InfoSec || Authorized C3PAO || CISSP || CMMC Provisional Assessor || CMMC Certified Professional

[Matthew Titcombe @Matt_Titcombe]

Here is an interesting question for everyone in the NIST SP 800-171/CMMC space. What year was "Controlled Unclassified Information (CUI)" first coined?

We spend tons of time griping about how long rule-making is going but fail to understand the history…https://t.co/FEHD6x1OAd

[Matthew Titcombe @Matt_Titcombe]

Is your organization struggling to identify CUI in your environment? Does your organization know the key tenets to identify CUI?

If so, this As the CMMC Churns will help your organization. This video will explain the three main te…https://t.co/werMZdYha1 https://t.co/x9Avcugmv3

[Matthew Titcombe @Matt_Titcombe]

Thanks @SingingTech!!! I love To-Do.

Can you provide an update on when the thick clients will be able to connect to To Do?

Also, any idea on when Bookings will come out for GCCH??? https://t.co/rXKMgJziJv

[Matthew Titcombe @Matt_Titcombe]

Is your organization getting ready to undergo a formal Conformity Assessment for NIST SP 800-171?

If so, you need to watch this video!!! With the uptick in non-voluntary and Joint Surveillance Voluntary Assessments (JSVA) done by…https://t.co/6WZIWwjnu9 https://t.co/7fdpHZ0Wl2

[Matthew Titcombe @Matt_Titcombe]

Jason,
The interesting part is ODPs are already in NIST SP 800-171 rev 2. If you follow the verbs, especially in NIST SP 800-171A Assessment Objectives, you will find that the verbs define, identify, and specify correlate to new ODPs and the verb establi…https://t.co/qIjJPKJmH8

[Matthew Titcombe @Matt_Titcombe]

Are you trying got understand the 3.13.7, “Split Tunneling” Security Requirement in NIST SP 800-171 Rev 2 (and draft Rev 3??

Like all of the requirements, there are nuances in the actual Security Requirement, “Prevent remote devi…https://t.co/uvvFfH0WTK https://t.co/Drey6FiBIN

[Matthew Titcombe @Matt_Titcombe]

DO NOT watch this if you are a Defense Industrial Base (DIB) Contractor. You have real work to do by implementing NIST SP 800-171 Revision 2. Here is what you need to do:
1. Ignore all of the CMMC Ecosystem Drama around the NIST…https://t.co/lYU1pdu6Pt https://t.co/9wRPeOqg01

[Matthew Titcombe @Matt_Titcombe]

DO NOT watch this if you are a Defense Industrial Base (DIB) Contractor. You have real work to do by implementing NIST SP 800-171 Revision 2. Here is what you need to do:
1. Ignore all of the CMMC Ecosystem Drama around the NIST S…https://t.co/C0JesV4oFI https://t.co/0QuHSYjGFU

[Matthew Titcombe @Matt_Titcombe]

For those of us in the NIST SP 800-171 ecosystem that are following the recently released NIST SP 800-171 Revision 3 Initial Public Draft... you should attend this.

For the majority of OSCs out there, do the following:
1. Don't attend this
2. Focus on ge…https://t.co/ukbavh1zvK

[Matthew Titcombe @Matt_Titcombe]

@David92389881, great catch. Definitely, something us CMMC/NIST SP 800-171/DFARS/... wonks should attend. I'll be there.

For the average DIB business owner, at this stage not sure it is worth the time. Focus on getting into NIST SP 800-171 Rev 2 compl…https://t.co/VenUvUXkB8

[Matthew Titcombe @Matt_Titcombe]

Fernando, awesome summary! https://t.co/msuGR9J1rM

[Matthew Titcombe @Matt_Titcombe]

*****************************************
*** Hazardous CMMC FUD Outlook ***
*****************************************
The National Institute of Standards and Technologies (NIST) released NIST SP 800-171 Revision 3 DRAFT for public comment.

The draft…https://t.co/nHw1Fj6SMq

[Matthew Titcombe @Matt_Titcombe]

This will be great to hear @David92389881's perspective on this at CMMC Day!

#cmmc  #cmmc2  #infosec  #informationsecurity  #compliance #cybersecurity #cui #fci #cmmcab #thecyberab #nist800171 #defenseindustry #defensecontractors #defensecontracting #grc…https://t.co/AErWzDjaOv

[Matthew Titcombe @Matt_Titcombe]

If you are looking for a half-day crash course on Cybersecurity Maturity Model Certification (CMMC), this may be for you!

I will be leading a 4-hour workshop on "CMMC: DoD’s 3rd Party Supply Chain Risk Management Program" at the Rocky Mountain Informatio…https://t.co/xr6VJWJMK7

[Matthew Titcombe @Matt_Titcombe]

This is a great place for #DIB suppliers and subcontractors to find potentially NIST SP 800-171 compliant partners. https://t.co/tbNObfoSfM

[Matthew Titcombe @Matt_Titcombe]

BREAKING NEWS from "As the CMMC Churns"... The Cyber-AB, with DoD's implicit blessing, is now allowing Authorized C3PAOs to conduct formal NIST SP 800-171 Assessments for organizations both inside and outside of the Defense Industr…https://t.co/LVUp19ylfp https://t.co/S09tXlWglI

[Matthew Titcombe @Matt_Titcombe]

Matt Gilbert, thanks for catching this and I concur this needs to incompass the supporting firms like ours. https://t.co/x51fcL9FtU

[Matthew Titcombe @Matt_Titcombe]

I expect more and more exclusions plus proof a business really is doing cybersecurity in order to get insurance https://t.co/XeoAL8BsoM

[Matthew Titcombe @Matt_Titcombe]

When your business prepares itself right for CMMC or a Joint Voluntary Surveillance Assessment (JVSA), you know the "Wuxi finger hold" and are ready for anything.

SKA-DOOSH your NIST 800-171 prep!

#cmmc  #cmmc2  #infosec  #informationsecurity  #complian…https://t.co/tgD8eYPnt4

[Matthew Titcombe @Matt_Titcombe]

Has your business made the implementation of NIST SP 800-171 harder than it needs to be? Are your employees using one device for CUI work and another for normal work?

If so, there is a good chance you have overengineered your env…https://t.co/QhKwK1hEmu https://t.co/LMRL2GaluK