-
New in our Vendor Risk Manager: Smarter Vendor Data Ingestion
We just made it easier (and faster) to manage vendor risk—on your terms. With our latest update to the Vendor Risk Manager, you can: Upload your vendor lists in seconds: No more one-by-one entry Use your own vendor questionnaires: Bring your existing templates into Apptega to keep your processes consistent and customized…
-
CMMC v2.13 (the CMMC final rule) is now available!
April 23, 2025: We have now released the final version of the CMMC framework. The new version is v2.13 and we have published the framework, assessment, and task pack (level 1 and level 2). The final rule was published on October 14, 2024 and went into effect on December 16, 2024. While the rule went into effect on December…
-
The Knowledge Base Has Joined the Community!
Since April 1st, the Apptega Knowledge Base officially lives here—inside the Apptega Community. Why the move? Because it just makes sense to bring everything together: One search bar, everything you need – Find KB articles, feature requests, and user discussions all in one place. Ask questions right where you are – No need…
-
📝 📢 Fall Product Launch Event Recap!
We covered a lot in our fall product launch event, so I wanted to compile all the announcements for you to have them in one place... New Content: New Frameworks: ISO 42001, PCI DSS 4.0, NIST 800-171 Rev. 3, and NYDFS. (Released in 2024) Updated Frameworks: Virtually every framework we support, such as HIPAA, CIS v8, NIST…
-
Don’t miss our Spring Product Launch: Go Further 🧑🚀
The security landscape is shifting—services are getting commoditized, margins are shrinking, and one-off projects aren’t enough to keep a business afloat. Go Further, our spring product launch event on March 26 at 1 pm ET is your gateway to new playbooks, powerful innovations, and a partner program designed for long-term…
-
NIST 800-171 Revision 3 – Coming December 9th – What You Need to Know
The National Institute of Standard and Technology (NIST) released the final version of the NIST 800-171 Rev. 3 in May of 2024. The Department of Defense (DoD) released the new version of the framework to include new controls and guidance to better protect Controlled Unclassified Information (CUI). This new version is not…
-
📰 CMMC 2.0 in 2025 Discussion
Hello everyone! I recently read this Breaking Defense article that discusses the implementation of the Cybersecurity Maturity Model Certification (CMMC) 2.0. In the article they state: "The 32 Code of Federal Regulations (CFR) final rule, which lays the framework for CMMC 2.0, went into effect on Dec. 16, but the DoD won’t…
-
New "Good Posture" Webinar Series! Grow your Managed Security business.
Apptega is launching a new webinar conversation series just for providers: "Good Posture: Straight Talk on Scaling Your Managed Security Business.” Throughout this series, we'll be talking with revenue and managed services practice experts at leading MSPs/MSSPs. Conversations will focus on monetizing managed security…
-
Can’t-miss product launch event 🚀 SECURE COMPLY REPEAT
Join us on Oct. 23, at 10 am PT / 1 pm ET, for a first-of-its-kind product launch, where you'll learn the best ways to fight commoditization in the managed security space and get a lift in recurring revenue, margins, and client retention. The event includes: A reveal of “the new Apptega” and its mission Insightful user…
-
What led you to to the cybersecurity compliance field?
Understanding everyone's backgrounds and job-related experiences helps add context to your questions and answers. Whether you are just now entering the cybersecurity field or have been in it for the past 20 years, let us know your story and start connecting with other members! Answer the questions below to help you get…
-
NIST AI RMF 100-1 is now Active in all Environments (5-30-2025)
We are proud to announce the NIST AI RMF 100-1 framework is now active and ready to use. The NIST AI RMF 100-1 is the outline for conducting assessments of AI of all kinds. It includes the content from the original published rule including all supporting content to not only provide the control, but also the supporting…
-
Take Our 2025 Compliance Benchmarking Survey
Hey Apptega community, you're invited to participate in our 2025 Compliance Benchmarking Survey! Help us uncover the latest compliance trends by sharing your perspective in this anonymous 3-minute survey. Last year, Apptega published its inaugural State of Continuous Compliance Report, offering unique insights and…
-
How are you reducing risks associated with over-reliance on single vendors?
Were you or your company specifically affected by the recent CrowdStrike and Microsoft incident? What steps is your company taking to reduce risks associated with over-reliance on single vendors? This recent incident got me thinking about how even the biggest companies in the world still heavily depend on third parties to…
-
How does your company train employees to be on the lookout for potential cyber threats?
With many of these recent data breaches involving stolen credentials and phishing attacks becoming more common and complex, how is your company handling employee education on these topics? How does your company train employees to be highly alert for phishing attacks or other cyber threats? Which of these tactics do you…
-
📰 Major Microsoft Changes after CrowdStrike Incident | Tuesday Times | July 30, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…
-
📰 CrowdStrike Outage | Tuesday Times | July 23, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…
-
📰 AT&T involved in One of the Largest Data Breaches | Tuesday Times | July 16, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…
-
📰 CISA Director says Banning Ransomware Payments is Off the Table| Tuesday Times | July 9, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…
-
📰 US Supreme Court ruling will likely cause cyber regulation chaos | Tuesday Times | July 2, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…
-
📰 Chemical Facilities Warned of possible data theft in CISA Breach | Tuesday Times | June 25, 2024
What is Tuesday Times? Tuesday Times is a weekly Tuesday series where we highlight a handful of recent cybersecurity-related news stories. We'll provide brief summaries of these news stories and link the articles directly, should you want to read more! Feel free to comment on any of the articles highlighted, or share your…