On July 13, 2026, the Department of War (DoW) announced a pause of the planned CMMC Phase II implementation while it conducts a 60-day review of the program. The DoW chief information officer (CIO) has suspended CMMC Phase II requirements and directed a…
This guide breaks down how to identify the right time to outsource, what services to prioritize, and how to choose a provider that fits your business.
For organizations working with the Department of Defense (DoD), achieving Cybersecurity Maturity Model Certification (CMMC) compliance is a regulatory obligation, as well as a strategic requirement that impacts your ability to win contracts and protect…
In today’s business environment, demonstrating strong cybersecurity practices is essential for regulatory compliance and earning the trust of customers, partners, and investors. For service organizations, achieving SOC 2 compliance is a way to show that…
When talking about security or real-life attacks, the focus naturally tends to be on the things that went wrong. Security reports look at the most common “ways in” or new potential exploits. In a sense,…
For small and medium-sized businesses (SMBs), achieving a robust cybersecurity posture is no longer optional in today’s fast-paced digital world. For organisations in the UK, the National Cyber Security Centre’s (NCSC) Cyber Essentials control framework…
If your organization is using Microsoft 365 for digital collaboration, you may face challenges with managing your SharePoint storage and its associated costs. As your organization grows and generates more content, you may find yourself…
Just a year ago, the U.S. Security and Exchange Commission (SEC) adopted rules requiring registrants to provide annual enhanced and standardized disclosures regarding “cybersecurity risk management, strategy, governance, and incidents.” This ruling aims to bring…
As you may remember from our first blog post on strengthening financial IT resilience, the Digital Operational Resilience Act (DORA) was enacted on January 16, 2023, and will be enforced soon, with supervision starting January…
Thrive is continuously monitoring changes in the regulatory environment to ensure we are prepared to help our clients achieve and maintain compliance. The U.S. Securities and Exchange Commission (SEC) adopted updates to Regulation S-P (Reg…
The financial sector is bracing for a significant shift with the U.S. Securities and Exchange Commission (SEC) “Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure” rule taking effect on December 18, 2023. As the deadline…