If you're a defense contractor or part of the Defense Industrial Base (DIB), your SPRS score isn’t just a number; it’s a gatekeeper to federal contracts. With the Cybersecurity Maturity Model Certification (CMMC) program gaining traction, understanding your Supplier Performance Risk System (SPRS) score is critical to maintaining contract eligibility and securing future opportunities.
Systems Engineering
Recent Posts
Fortinet has announced a critical vulnerability surrounding FortiSwitch Firmware. The vulnerability is related to the switch's password change function. An unauthenticated attacker with access to the GUI could modify passwords via specially crafted requests.
Cybersecurity threats continue to rise in both volume and sophistication and for credit unions, the stakes are especially high. In response, regulatory oversight has intensified as the National Credit Union Administration (NCUA) has named cybersecurity its top supervisory priority for 2025. Credit unions—particularly those with limited internal IT capacity—must
For nearly a decade, the Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool (CAT) has been an important tool for many financial organizations assessing cybersecurity risks. It has provided a standardized way to evaluate both inherent risks and cybersecurity maturity. However, as cyberthreats evolved, the CAT struggled to keep pace. The tool's static nature meant updates were infrequent, leaving credit unions with outdated guidance in a rapidly changing environment.
Should you immediately decide to select an enclave approach for CMMC? The real answer is that it depends. It’s an important strategic decision to make early on in your compliance journey. Understanding the pros and cons of the enclave approach—and the alternatives—will help inform which direction you choose. It comes down to balancing security with operational efficiency and productivity. Ideally, you are not giving up one for the other.
On January 14, 2025, Fortinet announced several vulnerabilities impacting multiple products. At Systems Engineering, we are highlighting these vulnerabilities as they affect the Fortinet solutions we support. Specifically, these issues impact FortiGate, FortiSwitch, FortiManager, FortiAnalyzer, FortiClient EMS, and FortiClient for Windows.
