628 results found

1. CMMC Compliance: A Step-by-Step Guide [Updated] 2023 – Intersecinc.com

   Introduction: CMMC Compliance

   Cybersecurity has become an increasingly critical concern for organizations across various industries as the digital landscape evolves. The United States Department of Defense (DoD) introduced the Cybersecurity Maturity Model Certification (CMMC) framework in response to growing threats and data breaches. The CMMC provides a structured approach to safeguarding sensitive information and ensuring the Defense Industrial Base (DIB) security. This article will guide you through the step-by-step guide to achieving CMMC compliance.

   Step 1: Understand the CMMC Framework:

   To begin your journey toward CMMC compliance, gaining a solid understanding of the framework’s key components is crucial. The CMMC model encompasses five maturity levels, each representing an increasing level of cybersecurity controls and processes. Familiarize yourself with the requirements, practices, and capabilities associated with each level to assess where your organization currently stands and determine your target level.

   Step 2: Assess Your Current Security Posture:

   Conduct a comprehensive assessment of your organization’s current security posture. Identify the areas where you meet the CMMC requirements and those that require improvement. This assessment will serve as a baseline for your compliance efforts and help you prioritize the necessary actions.

   Step 3: Develop a Compliance Roadmap:

   Create a roadmap outlining the steps and milestones required to achieve CMMC compliance based on your assessment results. Determine the resources, budget, and timeframe needed for each stage of the compliance journey. To ensure alignment and support, consider engaging internal stakeholders, including IT, legal, and management teams.

   Step 4: Implement Necessary Controls:

   Implement the required cybersecurity controls and practices to meet the specific CMMC level you are targeting. These controls cover many areas, including access control, incident response, risk management, system and information integrity, and more. Ensure appropriate policies, procedures, and technical measures are in place to meet compliance requirements.

   Step 5: Documentation and Record-Keeping:

   Maintaining comprehensive documentation is essential for CMMC compliance. Develop policies, procedures, and records demonstrating your organization’s adherence to the required controls. This documentation will be reviewed during the assessment and certification process. Regularly update and maintain these records to reflect any changes or improvements.

   Step 6: Conduct Internal Assessments:

   Perform internal assessments to validate your organization’s adherence to the CMMC controls. Regularly review and test your security measures to identify any gaps or vulnerabilities. Conducting self-assessments helps ensure continuous compliance and mitigates risks before the official assessment.

   Step 7: Engage a CMMC Third-Party Assessor Organization (C3PAO):

   To achieve official CMMC certification, you must engage a CMMC Third-Party Assessor Organization (C3PAO). C3PAOs are independent entities authorized to conduct formal assessments of organizations seeking certification. Collaborate closely with your chosen C3PAO to schedule and prepare for the assessment.

   Step 8: Undergo the CMMC Assessment:

   During the official CMMC assessment, the C3PAO will evaluate your organization’s compliance with the chosen maturity level. This assessment may involve document reviews, interviews, and technical evaluations. The C3PAO will provide a report detailing the findings and whether your organization meets the desired CMMC level.

   Step 9: Remediate and Improve:

   Based on the assessment findings, address any identified gaps or deficiencies promptly. Implement remediation measures to resolve the issues and improve your security posture. Maintain open communication with the C3PAO and leverage their expertise to ensure you meet the necessary compliance standards.

   Step 10: Achieve and Maintain Certification:

   Upon completing the assessment and remediation process, your organization will be awarded the CMMC certification. This certification demonstrates your commitment to cybersecurity and ability to protect sensitive defense-related information. Remember that maintaining compliance is an ongoing process. Regularly monitor and update your security practices to uphold the required CMMC level.

   Conclusion:

   Achieving CMMC compliance requires a structured and systematic approach. By following this step-by-step guide, organizations can navigate the complexities of the CMMC framework and enhance their cybersecurity posture. Investing in compliance not only ensures adherence to DoD requirements but also strengthens overall security measures, mitigates risks, and protects sensitive information from potential threats in an ever-evolving digital landscape.

   FAQ: CMMC compliance

   What is CMMC compliance?

   CMMC stands for Cybersecurity Maturity Model Certification. It is a unified standard introduced by the U.S. Department of Defense (DoD) to ensure that defense contractors and suppliers adequately protect sensitive information and systems. CMMC compliance refers to meeting the cybersecurity requirements outlined in the CMMC framework.

   What are CMMC requirements?

   CMMC requirements are a set of cybersecurity controls and practices that defense contractors must implement to achieve compliance with the CMMC framework. The specific requirements vary based on the CMMC level being targeted, ranging from basic cybersecurity hygiene to more advanced and comprehensive measures.

   What is CMMC vs NIST?

   CMMC and NIST (National Institute of Standards and Technology) are cybersecurity frameworks but differ in their focus and implementation. NIST provides guidelines and standards, such as NIST SP 800-171, which focus on protecting Controlled Unclassified Information (CUI). CMMC, on the other hand, is a certification model that builds upon NIST standards but adds additional requirements and levels of certification.

   What is the difference between NIST 800-171 and CMMC?

   NIST SP 800-171 is a set of cybersecurity requirements designed to protect the confidentiality of CUI. It provides a self-assessment process without a certification component. CMMC, however, is a maturity model that encompasses NIST SP 800-171 requirements and introduces additional security controls. CMMC also requires third-party assessments and certifications to verify compliance.

   What are the 5 levels of CMMC?

   The CMMC framework consists of five levels of cybersecurity maturity, ranging from Level 1 (Basic Cyber Hygiene) to Level 5 (Advanced/Progressive). Each level builds upon the previous one and includes additional controls and processes, reflecting an organization’s increasing cybersecurity maturity and capabilities.

   Is CMMC replacing NIST 800-171?

   Yes, CMMC is intended to eventually replace the self-assessment process of NIST SP 800-171. The DoD aims to use CMMC to strengthen cybersecurity practices and ensure that defense contractors meet higher security standards through third-party assessments and certifications.

   What are the 3 levels of CMMC?

   There is a slight discrepancy in the question, as the CMMC framework consists of five levels, not three. However, you are referring to the three maturity processes defined in CMMC. In that case, they are:
   “Performed” refers to having documented policies and procedures.
   “Managed” denotes that the processes are implemented and reviewed for effectiveness.
   “Optimized” means that organizations continuously improve their cybersecurity practices.
   How do you get CMMC Level 1?

   To achieve CMMC Level 1, organizations need to implement basic cybersecurity hygiene practices. It includes adherence to 17 security controls outlined in NIST SP 800-171, which focus on protecting Federal Contract Information (FCI). Self-attestation can be used to demonstrate compliance at this level and a formal certification is not required.

   Why do I need CMMC?

   If your organization wishes to participate in Department of Defense (DoD) contracts as a prime contractor or subcontractor, you must achieve the appropriate level of CMMC certification. The DoD requires CMMC certification to ensure contractors adequately protect sensitive information and systems, reducing the risk of cyber threats and breaches.

   Does CMMC Level 1 require a certification?

   CMMC Level 1 does not require formal certification. At this level, organizations can self-attest their compliance with the applicable security controls outlined in NIST SP 800-171. However, for higher CMMC levels, third-party assessments and certifications are necessary to validate compliance with the additional controls and practices.

   What is CMMC Level 2 compliance?

   CMMC Level 2 requires organizations to implement comprehensive security controls and practices beyond basic cybersecurity hygiene. It builds upon Level 1 and includes 55 security requirements to protect CUI. Organizations must undergo a third-party assessment and obtain certification to demonstrate compliance at this level.

   Source​
   https://www.intersecinc.com/blogs/cmmc-compliance-a-checklist-and-guide
   https://www.intersecinc.com/blogs/how-a-cmmc-consultant-can-help-you-achieve-cybersecurity-compliance
   https://www.intersecinc.com/blogs/how-much-does-it-cost-to-get-your-cmmc-2-0-compliance

   Introduction: CMMC Compliance

   Cybersecurity has become an increasingly critical concern for organizations across various industries as the digital landscape evolves. The United States Department of Defense (DoD) introduced the Cybersecurity Maturity Model Certification (CMMC) framework in response to growing threats and data breaches. The CMMC provides a structured approach to safeguarding sensitive information and ensuring the Defense Industrial Base (DIB) security. This article will guide you through the step-by-step guide to achieving CMMC compliance.

   Step 1: Understand the CMMC Framework:

   To begin your journey toward CMMC compliance, gaining a solid understanding of the framework’s key components is crucial. The CMMC… more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

2. the installation of an automatic translator of the tex

   poder recibir en español todas las comunicaciones de protonmail.com y de proton.me

   be able to receive in Spanish all communications from protonmail.com and proton.me

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Changes to existing features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

3. update payment methods for Brazil

   update payment methods for Brazil accepts PIX

   https://github.com/bacen/pix-api

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New features  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

4. ARM apps please

   ARM apps for phones using GNU/Linux based OS (thinking PureOS here, but there are others)

   10 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

5. Templates for email content composition

   Customizable templates for email composition. Please.

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

6. Host mastodon servers

   Mastodon federated micro blogging servers are receiving massive influx of twitter refugees. To create a new server, people need both Linux sysadmin knowledge, and also ability to moderate content and build a community of users. Proton could offer to host new mastodon servers and do the sysadmin jobs, including backups and installing updates. The remaining tasks, especially content moderation, will fall to the mastodon operator.

   10 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   2 comments  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

7. Synchronisation contacts with iPhone

   Hi Protonmail,
   I look forward to leave Google, but isn't for me possible yet. Mail works great, Calendar and Drive too, but I don't want to have multiple addressbooks (one in my iPhone and one in Protonmail). I'm waiting when synchronisation will be possible.

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

8. Change username

   ability to change your username

   12 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

9. Domain registration, domain management and DNS management

   Domain registration, domain management and DNS management
   To be complete free, fully managed and unbreakable

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  New features  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

10. ClickUp clon

    A ClickUp clone (sorry if I'm being too direct), but with the privacy that characterizes you. I'm sure you would do it better ;)

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

11. Swipe through attachments

    I recently noticed that when receiving mail with multiple attachment photos, you can't just swipe through them on iPhone. You have to go into each attachment individually, which is quite inconvenient. It would be wonderful if we could swipe through attachments. Thanks!

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  New features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

12. Android Integration

    Proton is intended for (extreme) privacy and I get it. This is very good and terrible at the same time : the vast majority of your apps provide no possibility to have a smooth integration with the ecosystem they live in :
    - Calendar : impossible to have my events in the Android calendar with my other accounts. Calendars can't be shared so that people use a common calendar for common activities.
    - Contacts : impossible to have my contacts in Android so I could use them with the dialer
    - Drive : no sync client for Linux, Windows, MacOS

    Why aren't you providing an option to opt-out from some privacy ? Not everybody needs extreme privacy.
    Because of that, normal people (and me) aren't going to use your awesome services : there is a too big usability gap comparing to Google and the others.

    Proton is intended for (extreme) privacy and I get it. This is very good and terrible at the same time : the vast majority of your apps provide no possibility to have a smooth integration with the ecosystem they live in :
    - Calendar : impossible to have my events in the Android calendar with my other accounts. Calendars can't be shared so that people use a common calendar for common activities.
    - Contacts : impossible to have my contacts in Android so I could use them with the dialer
    - Drive : no sync client for Linux, Windows, MacOS

    … more

    11 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

13. Change the upgrade of 1 GB into 5 GB for free for all Proton products

    I recommend to change the storage for the free plan 5 GB instead of having 1 GB.

    I always wanted to get upgraded into 5 GB for free instead of 1 GB for a change because if I have so much storage on all Proton apps, then i don’t have enough storage.

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

14. Proton swipe keyboard for mobile

    Summary: Privacy swipe keyboard for Android and iOS

    Detail: A swipe keyboard for mobile devices that is free of trackers and does not share keystroke information.

    Enhancements:
    1) Keyboard can use prediction providing data is kept private
    2) Any server-based shared data can be deleted, or, held on the users Proton Drive
    3) Stickers and Gifs can be added.

    17 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

15. Custom color for calendar, events and mail themes

    I recently switched from Google to PM, but I have to admit that the graphic style of PM is a bit of a disappointment, with this bright purple and very limited palette. Some like it, others don't. I liked Google's a lot, tbh. It would be nice to have the possibility to customize the themes of the mail (send button, accent colors, and stuff like this) or at least pick custom colors for mail labels, events etc. so that each user can make the experience more appealing.

    7 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

16. Improved PWA icons

    On desktop we can "install" the web app as a PWA (progressive web app). Currently the icons have a white background and are completely square. It doesn't look very good on MacOS. Could we get an updated version of the icons for those who install the app as a PWA? Probably the easiest solution would be to round the corners of the existing icons. It's a small effort for something that would make a big difference visually.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

17. Dark email body content

    Dark theme works great except that the message body content is set to have a white background of "#fff". An easy fix is the following:

    1.) Apply a CSS filter. "filter: invert(1)" to the element with attribute data-testid="message-content:body"

    2.) Apply another CSS filter to images so they are not inverted. CSS selector img.

    I tried it and it works but it's not permanent since I'm only modifying the styles using the browser's dev tools.

    Please add this to the dark theme CSS.

    8 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

18. all-in-one mobile app

    This seems a fairly simple ask: one single 'Proton' app (iOS or Android). This would include Mail, Contacts, Calendar, Drive etc (all except VPN which is fine to remain separate). Similar to the FastMail approach.This is the simplest, easiest, fastest, slickest way to combine all Proton apps and functionality into one single ecosystem, as per the latest blog post following the results of the user survey. I cannot commit to migrating to Proton fully without this and i'm fairly sure i'm not the only one. I'd sign up for a 5 year subscription with this available. Many thanks all - keep up the good work

    This seems a fairly simple ask: one single 'Proton' app (iOS or Android). This would include Mail, Contacts, Calendar, Drive etc (all except VPN which is fine to remain separate). Similar to the FastMail approach.This is the simplest, easiest, fastest, slickest way to combine all Proton apps and functionality into one single ecosystem, as per the latest blog post following the results of the user survey. I cannot commit to migrating to Proton fully without this and i'm fairly sure i'm not the only one. I'd sign up for a 5 year subscription with this available. Many thanks all -… more

    15 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    4 comments  ·  New features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

19. After disposing of an email, the subsequent adjacent email should be selected

    Currently, after archiving or trashing an email, the top, most recent email is automatically selected. However, this is disruptive to workflow. The subsequent email underneath should always be selected after the current email is disposed of in any way. This would make ProtonMail more in line with polished email interfaces like Microsoft Outlook and others.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  New features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

20. Send phishing report without opening email
    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Changes to existing features  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close