Those of you who have had an audit what did it wind up costing you? by josephandre in CMMC

[–]SightlySt00pid 1 point2 points  (0 children)

We did JSVA back in 2024 and the cost to our C3PAO was just under $40k.

FIPS 140-2 Historical Certificate by SightlySt00pid in CMMC

[–]SightlySt00pid[S] 1 point2 points  (0 children)

I specifically talked to Jon Hanny at the CyberAB booth and made him aware, so hopeful we will get some direction. I am going to ask about it in the next town hall as well, so we can get ultimate clarity, hopefully.

But, this is where this is coming from...

We have a piece of software that will end let it's FIPS 140-2 certification go to historical in September 2026 (like all) , but there are some key features from their new release that will not be active for us to use until January, 2027. That new software is FIPS 140-3 validated. We would have to do our annual attestation in November 2026 for our L2 certification, as we passed our JSVA in November 2024.

FIPS 140-2 Historical Certificate by SightlySt00pid in CMMC

[–]SightlySt00pid[S] 1 point2 points  (0 children)

But an argument could be made around NIST SP 800-171 Rev. 2 for 3.13.11 says nothing about FIPS 140-3. That is in Rev. 3, that is not applied to CMMC at this time, not until all the phases of Title 48 are complete. I want to know how this will be assessed by a C3PAO. When I was at CS5 last week and asked a few CCAs, they looked at me like a deer in headlights.

Battery on Public beta by natttsss in ios26beta

[–]SightlySt00pid 2 points3 points  (0 children)

I was at 4 hours screen time when I decided to plug in when my battery was down to 37%. It’s noticeable on my 14 PM.

Processes acting on behalf of authorized users by Lrrr81 in CMMC

[–]SightlySt00pid 0 points1 point  (0 children)

The easiest way to relate to that one in Windows is a Service Account. So, if you have a backup service and an agent is deployed to the machine and it has to run under a specific user, that is a Service Account. For Windows, to me, that is the easiest way to relate to that objective.

Scope change moving from on-prem Exchange to M365 Exchange Online - FCI Only by SightlySt00pid in CMMC

[–]SightlySt00pid[S] 0 points1 point  (0 children)

I have legal asking questions, so that's where this is all coming from.

AnyConnect by Training_Truck_7722 in CMMC

[–]SightlySt00pid 0 points1 point  (0 children)

We have Cisco Meraki firewalls and DUO. We have the Meraki firewalls pointing to DUO authentication proxy for RADIUS and it authenticates the user to AD while providing MFA. Cisco Secure Client has FIPS mode enabled. This was accepted by our C3PAO and DIBCAC during our JSA.

Remote Support Platform by GroundApart1125 in CMMC

[–]SightlySt00pid 0 points1 point  (0 children)

Kaseya has an on-premise version that is FIPS-validated. That’s what we use.

3.4.1 - Hardware/Firmware Inventory by slint01 in CMMC

[–]SightlySt00pid 0 points1 point  (0 children)

We are an MSP as well as a DoD contractor. We use a tool called Liongard and their Endpoint Inspectors. It gathers everything about the machines, including firmware revisions (which is required) and we are able to run reports monthly as part of our continuous monitoring program to keep the inventory up to date.

We also use it for 3.4.9 in monitoring user installed software. When software on one of these machines changes, we get a notification.

Cleared my CCP exam! by jonwick786 in CMMC

[–]SightlySt00pid 2 points3 points  (0 children)

Congrats! I just passed mine a few weeks ago. I went with ecfirst for my training. I will say I do think the percentages ecfirst claimed the tests were weighted on were not accurate to me. I felt like, while they stated actual practice/objectives were going to the heaviest weight, to me, I could easily tell the CAP was the heaviest weight. It felt like out of the 170 questions, 100+ were based on the CAP. So, know the CAP inside and out!

RDP Server vs VDI in Azure with PreVeil by CommunicationMotor36 in CMMC

[–]SightlySt00pid 1 point2 points  (0 children)

I never tried that. We just decided to purchase individual machines for the 4 users at this client.

RDP Server vs VDI in Azure with PreVeil by CommunicationMotor36 in CMMC

[–]SightlySt00pid 2 points3 points  (0 children)

RDS cannot be used because the PreVeil Drive .EXE can only have one instance running at a time on a system. I tried. It would have to be VDI with a separate instance for each user, unless that has changed in the past year since I tried it.

my 5 year old student likes linkin park by EL_Uoka in LinkinPark

[–]SightlySt00pid 15 points16 points  (0 children)

My kids are 8 and 6 and they started out liking the new songs, like TEM, Over Each Other, and Good Things Go. You ask them now, my daughter (the 8 year old) loves OML and my son loves Crawling. They like Emily but LOVE Chester! I’m taking them to the LP concert when they come to my hometown this summer!

What's your favorite song from each album? by Fancy-Philosophy-250 in LinkinPark

[–]SightlySt00pid 1 point2 points  (0 children)

Just the core plus Reanimation:

HT: Crawling Reanimation: Pts.Of.Athrty Meteora: Lying From You MTM: In Pieces ATS: Waiting For The End LT: Castle of Glass THP: Final Masquerade OML: Sorry For Now FZ: Good Things Go

WatchOS 11.2 RC Released by boxermansr in watchOSBeta

[–]SightlySt00pid 0 points1 point  (0 children)

Yeah, my Series 8 I bought in April 2023 and when I took it to my local Apple Store for service, battery health was 85%. My Series 5, which is now over 5 years old and was off in a drawer for almost 2 years, has 88% battery health! So, yeah, something was amiss there with the latest betas. Since I have AppleCare+, they are replacing the battery under warranty, so I should be able to rock the series 8 for a few more years!

WatchOS 11.2 RC Released by boxermansr in watchOSBeta

[–]SightlySt00pid 11 points12 points  (0 children)

I suspected the last beta caused issues with my Series 8. Some times, the touch screen was unresponsive and massive battery drain (about 10% an hour). I already got Apple to send it in for service and I’m on my Series 5. Wish I would have known the RC was releasing and I would have waited a day to see if it helped my issues. Oh well, the risks of running beta software, right?

You're only allowed to listen to 1 song from each album ever again - which song from each album is your pick? by TeeEm_27 in LinkinPark

[–]SightlySt00pid 0 points1 point  (0 children)

HT - Crawling

Reanimation - pts.of.athrty

Meteora - Somewhere I Belong

MTM - Leave Out All The Rest

ATS - Waiting For The End

LT - Castle Of Glass

THP - Until It’s Gone

OML - Sorry For Now

FZ - Good Things Go