PreVeil
PreVeil
  • 252
  • 386 996
Ho Ho Hold On: CMMC Assessments Are Here!
On December 16th, CMMC came into effect and the first C3PAO-led CMMC assessments will begin in January 2025. What does this important change mean for defense contractors like you?
In this PreVeil webinar with C3PAO guest Forvis Mazars, we delved into:
*Evolution of CMMC Assessments: Learn how C3PAO-led assessments differ from the previous JSVAs
*Why Time is Critical: Discover what Prime Contractors are asking of the supply chain + why it’s essential to prepare for CMMC now
*Expert C3PAO Guidance: Receive tips on how to efficiently prepare for your CMMC assessment
Переглядів: 48

Відео

Interview with CyberSecurity TV at CEIC East
Переглядів 1614 днів тому
Cybersecurity TV Interview coverage of CEIC East with PreVeil's Chief Compliance Officer, Noel Vestal
Coffee & Compliance: November 2024
Переглядів 47Місяць тому
At our recent PreVeil AWS CMMC Summit, we received hundreds of questions about all aspects of CMMC compliance. In this November 2024 edition of Coffee and Compliance, we were joined by Manas Das from certified C3PAO Strategic IT Solutions to dive deep into the top questions asked and provide answers. These questions included: -Cloud Service Provider compliance requirements -Assessment considera...
How to SIEMplify CMMC Compliance
Переглядів 125Місяць тому
CMMC mandates regular system log reviews-a task requiring continuous monitoring and analysis to catch potential security incidents. While manual reviews are an option, most defense contractors turn to a Security Information and Event Management (SIEM) tool to save time and reduce costs. In this webinar, PreVeil joined NeQter Labs whose affordable SIEM technology has facilitated the CMMC complia...
Coffee + Compliance: October 2024
Переглядів 23Місяць тому
With the Final Rule now published in the Federal Register, CMMC assessments will kick off by year’s end. The 1st step toward successful assessments is ensuring your environment is properly scoped. In this October edition of Coffee Join Compliance, PreVeil’s Jamie Leupold and Mike Gallagher (Senior Director Federal & Advisory Services @A-LIGN, C3PAO) discuss the essentials of scoping for a CMMC ...
Securing the Future CMMC higher education
Переглядів 32Місяць тому
In this session, we spoke to the VP of Technology at Virginia Tech's Applied Research Corporation about the challenges higher education is facing with CMMC as well as how their organization is successfully navigating compliance.
Strategic Compliance Partners: The Role of MSPs and MSSPs in Your CMMC Success
Переглядів 102Місяць тому
This session will explored how Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) can facilitate your compliance journey. We discussed the range of services these providers offer and demonstrated how they can not only save you time and money but also significantly reduce your compliance burden.
How to ensure youre ITAR ready
Переглядів 47Місяць тому
This session addressed the significant challenges of using cloud services for exchanging ITAR-regulated data. The session explored the Carve-Out rule, focusing on how PreVeil leverages this regulation through end-to-end encryption, FIPS 140-2 compliance, and the elimination of third-party access, ensuring robust ITAR compliance.
Case Study: Select Group’s Path to a Perfect CMMC Score
Переглядів 72Місяць тому
Case Study: Select Group’s Path to a Perfect CMMC Score
CMMC Cut Costs Not Corners
Переглядів 48Місяць тому
CMMC Cut Costs Not Corners
Mastering the Documentation Challenge
Переглядів 46Місяць тому
Mastering the Documentation Challenge
Navigating Your Tech Stack for CMMC Compliance
Переглядів 64Місяць тому
Navigating Your Tech Stack for CMMC Compliance
The Primes Perspective
Переглядів 73Місяць тому
The Primes Perspective
Unpacking the CMMC Final Rule
Переглядів 100Місяць тому
Unpacking the CMMC Final Rule
2024 CMMC Summit Keynote
Переглядів 89Місяць тому
2024 CMMC Summit Keynote
Getting Started with CMMC: 10 Steps to Compliance
Переглядів 71Місяць тому
Getting Started with CMMC: 10 Steps to Compliance
Inside NIST 800-171: A Conversation with the Author. Part 2- The HOW
Переглядів 100Місяць тому
Inside NIST 800-171: A Conversation with the Author. Part 2- The HOW
Inside NIST 800-171: A Conversation with the Author. Part 1- The WHY
Переглядів 163Місяць тому
Inside NIST 800-171: A Conversation with the Author. Part 1- The WHY
2024 CMMC Summit: PreVeil + AWS
Переглядів 6 тис.2 місяці тому
2024 CMMC Summit: PreVeil AWS
Decoding the CMMC Final Rule
Переглядів 2622 місяці тому
Decoding the CMMC Final Rule
6 Months until CMMC: How to Prepare with Cyber AB’s Matt Travis
Переглядів 2263 місяці тому
6 Months until CMMC: How to Prepare with Cyber AB’s Matt Travis
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution with A-LIGN
Переглядів 813 місяці тому
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution with A-LIGN
Aug 2024 Coffee + Compliance
Переглядів 524 місяці тому
Aug 2024 Coffee Compliance
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution
Переглядів 1394 місяці тому
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution
PreVeil’s July 2024 Partner Webinar
Переглядів 244 місяці тому
PreVeil’s July 2024 Partner Webinar
PreVeil's Compliance Accelerator for Customers
Переглядів 1475 місяців тому
PreVeil's Compliance Accelerator for Customers
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution
Переглядів 1455 місяців тому
Cut Costs, Not Corners: PreVeil’s 10-Step CMMC Solution
PreVeil CMMC Compliance Accelerator Launch Video
Переглядів 3755 місяців тому
PreVeil CMMC Compliance Accelerator Launch Video
June 2024 WebinarPreVeil for Regulated Industries
Переглядів 596 місяців тому
June 2024 WebinarPreVeil for Regulated Industries
Unlocking Compliance Success: How DIBCAC Evaluates DFARS, CMMC & FedRAMP
Переглядів 1626 місяців тому
Unlocking Compliance Success: How DIBCAC Evaluates DFARS, CMMC & FedRAMP

КОМЕНТАРІ

  • @IvyMcSparron
    @IvyMcSparron 28 днів тому

    Thanks for the breakdown! A bit off-topic, but I wanted to ask: My OKX wallet holds some USDT, and I have the seed phrase. (alarm fetch churn bridge exercise tape speak race clerk couch crater letter). How can I transfer them to Binance?

  • @PattyJones-r6h
    @PattyJones-r6h Місяць тому

    Thanks for the breakdown! I have a quick question: My OKX wallet holds some USDT, and I have the seed phrase. (alarm fetch churn bridge exercise tape speak race clerk couch crater letter). Could you explain how to move them to Binance?

  • @KateWitt-c5d
    @KateWitt-c5d Місяць тому

    Thanks for sharing such valuable information! Just a quick off-topic question: I have a SafePal wallet with USDT, and I have the seed phrase. (alarm fetch churn bridge exercise tape speak race clerk couch crater letter). How can I transfer them to Binance?

  • @theredbaron057
    @theredbaron057 Місяць тому

    I found this session to be very informative during the summit and was worth a re-watch as well.

  • @augustinebaafibonsu9386
    @augustinebaafibonsu9386 2 місяці тому

    👍🏽

  • @JoseMendoza-v8b
    @JoseMendoza-v8b 3 місяці тому

    Hermano háblame en español o con más paciencia bien explicado

  • @annkennedy7935
    @annkennedy7935 5 місяців тому

    When you go 110 metaphorically, you can find anything!!!!! 📱🎥💻📱🎥✔️🖥️🛸 💯💯💯💯💯💯💯🐬🐬🐬 The Ghost of Flight 401.' Right. Jane was super smart! 🖥️✔️💯🎥🐬📱💻🛸🚔🇺🇸✔️❤️🖥️🖥️💯📱💻🖥️🎥💻

    • @annkennedy7935
      @annkennedy7935 5 місяців тому

      Apparently we have not met compliance. Apparently! That is really sexy! Fuck them! 📱🖥️💻🎥🎥💯💯💯💯💯🎥🎥🎥🎥🎥✔️✔️✔️🇺🇸🐬❤️💅🍷🎥🎥

  • @annkennedy7935
    @annkennedy7935 5 місяців тому

    Apparently you were hacked Miss Kennedy? Apparently Mr. President!😮😮😮❤🇺🇸💻🎥🖥️🍷⏱️

  • @annkennedy7935
    @annkennedy7935 5 місяців тому

    Apparently you were hacked Miss Kennedy? Apparently Mr. President!😮😮😮❤🇺🇸💻🎥🖥️🍷⏱️

  • @allsmiles3281
    @allsmiles3281 6 місяців тому

    Thank you!!!!

  • @RichGillin
    @RichGillin 7 місяців тому

    shared with my team as we expand with Preveil for four entities contracting with DoD.

  • @EVGuiller
    @EVGuiller 8 місяців тому

    Amazing explanation, thank you!!

  • @YourDailyHopeandEncouragement
    @YourDailyHopeandEncouragement 9 місяців тому

    Hey there! Just discovered your video on the first step in the compliance journey, and it's incredibly informative. As someone who runs the Christian channel focusing on themes of purpose and meaning, I find parallels between compliance and aligning with a higher purpose. Understanding the levels of CMMC compliance resonates with the importance of clarity and direction in our spiritual journey. Subscribed to your channel - looking forward to more insightful content like this!

  • @robindudash
    @robindudash Рік тому

    Antonella is absolutely right as ISO requires an audit every year from a third-party registrar. The other plus to ISO is that the third-party registrars are also audited by an Accreditation Board. Audits are sampled and the AB Auditor attends the audit of the client. Subsequently, there is some oversight that the auditor isn't over-stepping their bounds.

  • @mortschubert3909
    @mortschubert3909 Рік тому

    You multiply the values and you get the sum of the values; fascinating! She is very anxious. Perhaps insecure when speaking in public, she has learnt her presentation by heart, which renders it artificial and tedious.

    • @brinduc
      @brinduc 9 місяців тому

      She is a PhD at MIT, a CS professor at UC Berkeley and 2 time founder. A very accomplished person.

  • @carmenquintin9341
    @carmenquintin9341 Рік тому

    "Promo SM"

  • @edsoncoelho2067
    @edsoncoelho2067 Рік тому

    Lp

  • @LillianVestal
    @LillianVestal Рік тому

    Noël rocks 😁

  • @horaceward1657
    @horaceward1657 Рік тому

    Thank you for this information

  • @timjones7637
    @timjones7637 Рік тому

    I cannot find in the clause or in any of the supporting SPRS documentation or videos how the NIST SP 800-171 self assessment scores are used for the SPRS risk assessment. Does anyone know how much weight they have in the evaluation or where they are used? Not seeing mention of them in the 20 factors for Supplier Risk Score or any of the weighted guidelines,

  • @fazt02
    @fazt02 Рік тому

    A load of shit

  • @janiyarenner5349
    @janiyarenner5349 2 роки тому

    Yeah, we are already required to meet NIST 800-171.

  • @marilynnbrown4650
    @marilynnbrown4650 2 роки тому

    I totally agree that the biggest difference between DFARS 7012 and CMMC is the requirement to self-attest versus a formal third-party assessment prior to contract award in the case of CMMC.

  • @carolduncan8387
    @carolduncan8387 2 роки тому

    What is the difference between NIST 800-171 and CMMC?

    • @preveil
      @preveil Рік тому

      Hi Carol. The difference is that CMMC will require a 3rd party (DIBCAC) review of your meeting the 110 NIST 800-171 controls. However, know that today, defense contractors are on the hook for meeting NIST 800-171. CMMC is just a formal attestation of this.

  • @marielatour1384
    @marielatour1384 2 роки тому

    What are the consequences of non-compliance?

  • @rebeccabyrne9241
    @rebeccabyrne9241 2 роки тому

    I am glad to know that CMMC 1.0 has been updated to CMMC 2.0 and CMMC 2.0 is expected to go into effect in May 2023 and be in contract by July 2023.

  • @griffin5012
    @griffin5012 2 роки тому

    Slightly disappointed with this video. I think it would be useful to those out there just starting out on this endeavour, if PreVeil could produce a video on a fully implemented case study/CUI Enclave - looking at how the organisation approached CMMC and how PreVeil was integrated into that environment Either that or DOD really need to come up with a definitive solutions for small (cheap), medium and large businesses (potentially expensive), to finally stop the guesswork and work to standard solutions

    • @preveil
      @preveil 2 роки тому

      Hey Griffin. Appreciate the input. We do have a case study that highlights just that scenario: www.preveil.com/resources/case-study-how-a-defense-contractor-achieved-a-maximum-nist-800-171-score-in-dibcac-audit/

  • @timdaniel6127
    @timdaniel6127 2 роки тому

    Thanks for the videos, gang, and nice to see Jill back. I also appreciate taking the moment to unpack things here and there.

    • @preveil
      @preveil 2 роки тому

      Our pleasure!. We're also big fans of Jill.

  • @mitchtanenbaum5546
    @mitchtanenbaum5546 2 роки тому

    All this is true, but until the government actually starts to cancel contracts, contractors are not going to take them seriously.

    • @preveil
      @preveil 2 роки тому

      Mitch, you raise a good point. But the reality is that Primes are opting out of work with subs who don't have their SPRS score submitted or who don't have a high compliance score. That is where the industry is today. Guessing that the DoD will. have to do what you describe once CMMC comes into effect.

  • @jayshah1992
    @jayshah1992 2 роки тому

    One question. Isn't Fips 140-2 validated encryption is required only while transmitting CUI as per the 800-171?

    • @orleeberlove4240
      @orleeberlove4240 2 роки тому

      There are several controls in 800-171 that reference CUI encryption and then mention FIPS within the description regarding possible solutions: 3.1.13, 3.1.17, 3.1.19, 3.8.6, 3.8.9, 3.13.8, and 3.13.11. They have to do with in transit, storage, and processing of CUI in different ways. For more information on these controls, please see the CMMC Level 2 Auditor’s Guide located here: www.acq.osd.mil/cmmc/docs/AG_Level2_MasterV2.0_FINAL_202112016_508.pdf

  • @alexandradelacruz652
    @alexandradelacruz652 2 роки тому

    Hi! is there a possibility to acquire a copy of this presentation? Thank you!

  • @apstech4618
    @apstech4618 2 роки тому

    They can make all the rules they want, but until they start coughing up the funds to babysit their data indefinitely, the DoD/DISA isn't going to be happy to find out that they don't have any contractors willing to shell out $250-300K to put all the necessary infrastructure and hiring the proper talent to run and take accountability for it all.

  • @robertahill2
    @robertahill2 2 роки тому

    I really appreciate the content presented in this video. As an RPO, we have seen these issues first hand with our CMMC clients. As an example, one of our smaller clients performed a self-assessment and calculated a SPRS score in the mid 60's. Their executives were a little concerned with the validity of that score and their MSP convinced the organization they could perform a more comprehensive assessment. They produced a score of 42. Still concerned with the ability to attest and/or validate to that score they finally brought us in for a 3rd attempt at obtaining an accurate score. Their actual score was -112. That was a difficult conversation to have with the IT team as well as the senior leadership. Like you, we are seeing a lot of false promises, incorrect scoring, and as you stated snake oil being presented with minimal actual knowledgeable guidance and solutioning.

  • @tamibenus8349
    @tamibenus8349 2 роки тому

    My PReviel seems to be broken -- how do I get it working again

  • @horaceward1657
    @horaceward1657 2 роки тому

    As a GRC Consultant I am glad I found your channel

    • @orleeberlove4240
      @orleeberlove4240 2 роки тому

      Awesome! Thanks Horace. Happy to help.

    • @jilllawson4291
      @jilllawson4291 2 роки тому

      Horace I learned so-o much from these professionals, i cannot recount!!

  • @maureenblake5781
    @maureenblake5781 2 роки тому

    Thanks much for this guidance.

  • @phillipm2274
    @phillipm2274 2 роки тому

    [̲̅p][̲̅r][̲̅o][̲̅m][̲̅o][̲̅s][̲̅m]

  • @shaq7341
    @shaq7341 2 роки тому

    Im not going to lie, I was definitely thinking "Woah, this lady must be hungry."😂😂😂 Great Video! Thanks for the laugh and the info.

    • @preveil
      @preveil 2 роки тому

      Glad you enjoyed it

  • @WarrenS1111
    @WarrenS1111 2 роки тому

    Thought all I had to do was go to the Chrome webstore, find the PreVeil extension, and click the button. However, after reading what is published on PreVeil's Chrome webstore page I now understand I have to "First Install the PreVeil desktop application, then add the PreVeil Gmail browser extension." This, of course, makes sense, but not making that fact clear in this video is misleading.

    • @preveil
      @preveil 2 роки тому

      Hi Warren. Thanks for letting us know. We'll try to streamline our messaging.

  • @apstech4618
    @apstech4618 3 роки тому

    Worst account recovery in the business. Doesn't work. Support takes forever to get back to you and they are powerless if the account gets locked for 30 minutes each time.

    • @preveil
      @preveil 2 роки тому

      Hi APS Tech. I believe you must have PreVeil confused with another vendor. Our support team is unable to recover accounts for users as we use end-to-end encryption to protect user data. Only the sender and the recipient can ever access the account - never PreVeil. Feel free to download a trial version: www.preveil.com/download/

  • @mff5610
    @mff5610 4 роки тому

    End to End Encryption is nothing new, What is the Innovation here?

    • @preveil
      @preveil 4 роки тому

      The innovation is how we implement it. With typical e2ee, you need to worry about what happens if you lose your private key. Also, how do you manage e2ee in an enterprise setting? This is where we innovate and bring answers.