Colchester, Vt. – NuHarbor Security has released a support model for Splunk MSSP clients that need to pursue Cybersecurity Maturity Model Certification (CMMC).
CMMC is a new standard for implementing cybersecurity controls across the 300,000 companies in the Department of Defense (DOD) supply chain. A large piece of CMMC compliance includes having a robust security auditing and monitoring program in place, depending on the CMMC certification level required. NuHarbor’s MSSP powered by Splunk can support all the expected CMMC audit compliance initiatives when finalized. NuHarbor’s Splunk Professional Services team can onboard clients in less than two weeks.
If you’re curious as to whether CMMC certification applies to you, your DOD contract should specify applicability and the corresponding certification level. If you’ve been notified that you need to be CMMC certified, you should prepare to meet the prevailing CMMC guidelines. CMMC certification needs include:
- Proactive alerting of logging failure, either file or host non-conformity
- CMMC log format retention for detailed forensic analysis
- Log file encryption
- Access control models to conform to NIST and CMMC access control requirements
- Continuous security correlations for unlawful, unauthorized, suspicious, and unusual activity
- Log file normalization for all types of log files and machine data
- Access to full threat community with access to TTPs, IOCs, and IOAs
- Full incident response planning, implementation, and response teams
- Team of security analysts to review alerts generated
- Threat hunting team to identify persistent attack types that elude normal SIEM technologies
If you have a CMMC certification requirement, NuHarbor can deliver the following:
- CMMC readiness assessment
- Vulnerability management
- Penetration testing
- Risk assessments
- Development of SSP or POAMs
- Implementation of full Identity and authorization programs
