ControlMap

A space to ask questions, get answers, and engage surrounding ControlMap

  • 8 Topics
  • 7 Replies

8 Topics

Dan Fox
Rocketeer
Dan FoxRocketeer
posted in ControlMap

CMMC for the MSP - Webinar with Kevin Mann the "CMMC Jedi"

ScalePad’s ControlMap team hosts weekly community peer group webinars on Wednesdays at 10am PST focused on Cybersecurity Compliance.  This week of March 27th our special guest was Kevin Mann, a ControlMap partner and CMMC Certified Professional and Assessor and his company is a C3PAO candidate. Kevin is the President of Resilient IT with over 15+ years experience as a technology & cybersecurity consultant in the MSP industry . He has been dubbed the “CMMC Jedi “and regularly presents on the topic of CMMC within the MSP and tech community. The recording to the Webinar is below and after 5 minutes of brief introductions you can hear Kevin share insights on an MSP’s responsibilities when working with a client who requires CMMCassessment:  ControlMap Weekly Wed Mar 27th Recording: https://scalepad.wistia.com/medias/xce7ydgxouInvite to join future Weekly Webinars: Wednesday's 10am Pacific / 1pm Eastern (45min)Register here: https://scalepad.zoom.us/meeting/register/tZcud-ugqTwqHdXh26ql_

1
Luis Giraldo
Community Manager
1 month ago
Dan Fox
Rocketeer
Dan FoxRocketeer
posted in ControlMap

Shared Responsibility Matrix - what and why?

ControlMap’s April 2024 release came out with a new compliance feature to manage shared responsibilities directly within frameworks.In cybersecurity compliance, a responsibility matrix is essential. It provides clarity, accountability, and structure, guiding efforts to manage and mitigate risks. This foundational tool supports effective governance and demonstrates commitment to protecting sensitive information and assets. Some purposes of a shared responsibility matrix for cybersecurity management:It clarifies roles and responsibilities, reducing confusion and ensuring tasks are addressed. It fosters accountability by assigning specific responsibilities to individuals or teams. It promotes collaboration among departments and stakeholders, leading to more effective outcomes. It helps identify gaps and redundancies in cybersecurity processes, enabling resource optimization. It supports compliance efforts by documenting task implementation and management. It facilitates continuous improve

0
Dan Fox
Rocketeer
8 days ago
D
dkmooreNew Member
asked in ControlMap

Seeing duplicate evidences

We are seeing duplicate entries of evidence with different objectives for some of our customers.   We have no idea if this is expected behavior.   We only have one framework associated with the customer.  Please advise.  

2
Andrea Ayala
Community Manager
8 days ago
Dan Fox
Rocketeer
Dan FoxRocketeer
posted in ControlMap

Compliance Corner: HIPAA Expanded Security + Privacy + Breach Notification

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) is a federal standard specifically designed to secure protected health information (PHI). Regulated by the Office for Civil Rights, HIPAA outlines the permissible use and disclosure of PHI in the USA as set forth by HHS guidelines.  HIPAA compliance around security and technology maintains a sizeable mind share within the MSP community as the healthcare industry is both technology dependent and ranges in size from large medical organizations and hospitals on the enterprise side on down to small doctor and dental offices on the SMB side and everything in between.Regardless of the size of organization, PHI data and the systems processing PHI data must be scoped, secured and protected. First off, what is considered PHI data? The detailed definition is below but at a high level it would be any data that would identify a patient or individual. The good news is that if PHI data is encrypted it is considered protected and

0
Dan Fox
Rocketeer
1 month ago
Dan Fox
Rocketeer
Dan FoxRocketeer
published in ControlMap

Compliance Corner: NIST CSF 2.0 Released!News

 The first version of NIST’s Cybersecurity Framework aka NIST CSF was released in 2014 and has become enormously popular with businesses and organizations of all sizes. In fact, it is a top 5 framework within ControlMap’s MSP community alongside CIS, SOC 2, ISO 27001, and CMMC/NIST 800-171. The appeal of NIST CSF is its logical approach to Cybersecurity with control objectives organized into 5 easy to understand functional groups: “Identify” →  “Protect” →  “Detect” →  “Respond” →  “Recover” Now a newly introduced sixth functional group added to NIST CSF 2.0 is “Govern,” focusing specifically on Governance.You’ll likely find NIST CSF requested by small- and mid-sized government agencies such as water authorities, city/state/county departments, and Port Authorities, among other critical infrastructure organizations and their vendors. Private-sector organizations are also looking to align with insurance requirements or well-recognized Federal standards.ControlMap will continue to support

421
A
2 months ago
Dan Fox
Rocketeer
Dan FoxRocketeer
posted in ControlMap

CMMC 2023 Resources

A place to discuss CMMC compliance along with some helpful links:  ControlMap provides the CMMC framework based on NIST 800-171r2 with special assessment tools including SPRS scoring, POAM reporting and SSP report builder. CMMC Framework Screenshot DOD’s CMMC Home Page: https://dodcio.defense.gov/CMMC/Model/Assessment Overview and Levels 1//2/3 explained: https://dodcio.defense.gov/CMMC/Assessments/Who needs NIST 800-171: https://www.nist.gov/blogs/manufacturing-innovation-blog/what-nist-sp-800-171-and-who-needs-follow-it-0DOD Vendor List - 2023: https://dodsoco.ogc.osd.mil/Portals/102/Documents/Conflicts/2023%2025K%20covering%20FY2022.pdf 

1
D
3 months ago
Andrea Ayala
Community Manager
Andrea AyalaCommunity Manager
published in ControlMap

ControlMap Overview

Research shows that 90% of IT service providers are not compliant with any framework; the reality is this number is closer to 99%. Why aren’t they compliant? Prepping for an audit and managing different frameworks can be complicated and a major time waste for MSPs.For growing and scaling MSPs that need a system to manage compliance operations, ControlMap is an automation platform that expedites compliance for over 35 frameworks such as SOC 2, ISO 27001, CMMC, CIS, and more. Unlike any other compliance solutions,  ControlMap helps MSPs jumpstart a compliance as a service (CaaS or vCISO) offering, increasing revenue and building trust with clients.Manage compliance operations within a single platform with a structured and repeatable approach with ControlMap. Check out our ControlMap overview document below!

611
Dan Fox
Rocketeer
4 months ago
Luis Giraldo
Community Manager
Luis GiraldoCommunity Manager
posted in ControlMap

I Interviewed Dan Fox from ControlMap!

This was such a fun interview to do with Dan Fox! We got into everything from the genesis of ControlMap to the challenges MSPs have with deploying and scaling a Compliance-as-a-Service practice.Some questions for the community:What are some of the challenges you’re seeing in getting your clients on the compliance train? What roadblocks are you seeing internally in your MSP to get more diligent with your own compliance journey?We’d love to do more sessions/workshops on compliance topics, please let us know if you’d like to see any specific topics explored!Check out the interview: 

1
Dan Fox
Rocketeer
4 months ago
Terms & ConditionsCookie settings