Compliance

A brief history of Department of Defense security requirements
A Brief History of DoD Security Requirements

Infographics

A brief history of Department of Defense security requirements

Take a journey through the highlights of cybersecurity requirements for the Defense Industrial Base.
Insights from Bob Metzger: CUI, CMMC, and the importance of cybersecurity

Articles

Insights from Bob Metzger: CUI, CMMC, and the importance of cybersecurity

Bob Metzger chats with C3 CRO Bill Wootton about controlled unclassified information (CUI), who's responsible for it, who marks it, how do you handle it, and its role in both...
Insights from Bob Metzger: The Accidental Rule Drop

CMMC

Insights from Bob Metzger: The Accidental Rule Drop

In this short video, Bob Metzger, a well-respected authority on government security laws and regulations related to the Defense Industrial Base and CMMC, speaks with Bill Wootton, chief revenue officer...
Insights from Bob Metzger: CMMC & its impact on MSPs and MSSPs

Insights from Bob Metzger: CMMC & its impact on MSPs and MSSPs

Bob Metzger chats with C3 CRO Bill Wootton about the prevalence of MSPs and MSSPs and their role in CMMC, cybersecurity, & FedRAMP.
Insights from Bob Metzger: NIST 800-171 Revision 3

CMMC

Insights from Bob Metzger: NIST 800-171 Revision 3

In this short video, Bob Metzger, a well-respected authority on government security laws and regulations related to the Defense Industrial Base and CMMC, speaks with Bill Wootton, chief revenue officer...
Decoding CMMC Compliance: Understanding When to Use GCC or GCC High

Articles

Decoding CMMC Compliance: Understanding When to Use GCC or GCC High

Latest release of our CMMC Reference Architecture is here!
Steel Root logo surrounded by red sunburst graphic

Latest release of our CMMC Reference Architecture is here!

Semi-annual update to Steel Root's managed compliance offering includes security and usability improvements, enhanced administrative controls, and updates to compliance implementations to help customers prepare for CMMC.
How to Choose the Right MSP for CMMC Compliance Services

How to Choose the Right MSP for CMMC Compliance Services

Mac OS Security Compliance and CMMC: Can They be Compliant?

Mac OS Security Compliance and CMMC: Can They be Compliant?

DoD Thunderdome: Legacy Security Enter, Zero Trust Leave
Gray glass dome with dark clouds above it

DoD Thunderdome: Legacy Security Enter, Zero Trust Leave

Thunderdome is a DoD zero-trust prototype that “aims to reconcile zero trust ideals, identity management technology, and the secure access service edge (SASE) concept with endpoint security goals.”
CUI Marking & Identification Guide

CUI Marking & Identification Guide

A guide to understanding Controlled Unclassified Information, how to identify CUI in your organization, and how to correctly mark information as CUI.
Why Moving to GovCloud Should Be Your First Step Towards Compliance

Why Moving to GovCloud Should Be Your First Step Towards Compliance