Category: Cybersecurity
-
CMMC Phase II Suspended: What It Means and What to Do Next
On July 13, 2026, the Department of War suspended CMMC Phase II, removing the November 2026 third-party audit deadline. But DFARS 252.204-7012, NIST SP 800-171, and your SPRS self-attestation all still apply. This is schedule relief, not scope relief, and here is what defense contractors should do during the pause.
-
What Is a Fractional vCISO? And Does a Credit Union Under $500M Actually Need One?
A fractional vCISO gives credit unions under $500 million the strategic security leadership of a full-time CISO, part-time and at a fraction of the cost. Here is what a vCISO actually does, how it differs from a vCIO, what NCUA examiners expect, what engagements cost, and how to tell if your credit union needs one.
-
Tempel Steel Data Breach Settlement: Incident Response Lessons for 2026
Tempel Steel confirmed its breach on March 25, 2025. Twenty days later it was named in a class action, and by 2026 it faced up to $175,000 in fees plus multi-year liability, for just 5,192 employee records. Here’s what the settlement teaches financial, healthcare, and education IT leaders about response timelines.