AC.1.002 User Access Restrictions (CMMC Level 1)
Limit information system access to the types of transactions and functions that authorized users are permitted to execute.
AC.1.001 Basic Security Requirements (CMMC Level 1)
Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems).
CMMC Level 3 Control - Email Sandboxing (SI.3.220)
An overview for this control states an organization should utilize sandboxing to detect or block potentially malicious email. The action can prevent malicious files from entering the network and should be document in the Configuration Management Policy.
Password Security Question Recommendations
It is risky to post security questions. Security questions exist on pretty much every website that requires a username and password.
Zoom enacts security and privacy control to prevent Zoombombing
On April 5th, Zoom turned on the passwords and waiting room features for meetings by default aimed at users of their free version and those with a single license version to help prevent “Zoombombing”.
What is Zoombombing and how to defend against it
Zoombombing is when an unauthorized person or stranger joins a Zoom meeting/chat session and cause disorder by saying offensive things and even photobombing your meeting by sharing pornographic and hate images.
The CMMC Accreditation Body signs MOU with the U.S. Department of Defense
The CMMC-AB is pleased to announce that it has mutually signed the Memorandum of Understanding (MOU) with the Department of Defense.
Setting up the root account on Kali 2020
If you would like to use root instead of the none superuser account kali, here are the instructions to do so:
Kali 2020.1 Default Username & Password - kali kali
In Kali Linux 2020.1, both the default user and password will be “kali”
Cybersecurity Maturity Model Certification (CMMC) Levels
The CMMC model has five defined levels, each with a set of supporting practices and processes. Practices range from Level 1 (basic cyber hygiene) and to Level 5 (advance/progressive).