3 min read
The 4-Phase AI Security Framework Every CISO Needs
The acceleration of artificial intelligence adoption has completely outpaced traditional security frameworks. What used to take ten years in...
-2.webp?width=1920&height=961&name=pSEO-Images-%5BFramework%5D_Requirements_(2)-2.webp)
8 min read
PCI DSS Penetration Testing Requirements
Quick Answer: PCI DSS penetration testing requirements mandate that organizations handling cardholder data conduct both internal and external...
3 min read
The Evolution and Enforcement of CMMC with Jacob Anderson
In the latest episode of Trust Issues, Jacob Anderson joins the team to discuss the practical realities of achieving and maintaining CMMC...
6 min read
Why CMMC Readiness Falls Apart in the Interview Room
CMMC programs might look like they’ll pass on paper, but fall apart in the interview. Assessor Fanta-Marie Toure shares how organizations can better...
4 min read
Announcing BEMO's CMMC Level 2 Certification
BEMO is now CMMC Level 2 certified! Here's what we learned going through it, and what it means for the companies counting on us to help them get...
3 min read
The Truth About CMMC Mock Audits
Most organizations approach CMMC Level 2 certification with the wrong question. They ask: What do we need to pass the audit? But the better question...
6 min read
Inside BEMO's CMMC Level 2 Certification: 7 Takeaways From Our Team
BEMO recently earned CMMC Level 2 certification. But behind that announcement was a team of people across security, IT, operations, data, and HR who...
3 min read
Security Lessons from a Microsoft Veteran
Bruno Lecoq spent twenty years at Microsoft before founding BEMO. He realized that the small and medium business sector lacked practical...
4 min read
Rethinking Cybersecurity in the Defense Industrial Base
For organizations working with primes like Lockheed Martin or Boeing, frameworks such as CMMC, DFARS and ITAR aren’t optional checkboxes. They are...
5 min read
Everything You Need to Know About CMMC Compliance
For companies that work with the U.S. Department of Defense (DoD) or its contractors, cybersecurity compliance is no longer optional. Frameworks like...
7 min read
CMMC Level 2 Requirements: What You Need to Comply
Quick answer: CMMC Level 2 requires defense contractors handling Controlled Unclassified Information (CUI) to implement all 110 security controls...
7 min read
FedRAMP vs CMMC: What Defense Contractors Must Know
Quick Answer: CMMC applies to DoD contractors handling FCI or CUI. FedRAMP authorizes cloud service providers selling to federal agencies. Most...
4 min read
There’s a Real Cost to “We’re Too Small to be Attacked”
Small and mid-sized companies, especially government contractors, still cling to one comforting belief: “We’re too small to be worth attacking.” But...
5 min read
The CMMC Revolution: How BEMO Is Redefining Compliance.
Bruno Lecoq spent 20 years at Microsoft before co-founding BEMO. He didn’t leave because he disliked the company. In fact, he says he “owes his life...
5 min read
The Hardest Part About Compliance Isn’t Certifications, It’s Discipline
Most companies think the toughest part about compliance is the technology or getting all the right certifications. They’re wrong. The toughest part...