What are /r/NISTControls' favorite Products & Services?

From 3.5 billion Reddit comments

It's been a while since we used them, but I think with Box, you need to enable Box KeySafe - Enterprise Key Management -- otherwise the default consumer configuration is your files are indeed encrypted but Box employees have access to decryption key as well as you for support purposes...

https://www.box.com/security/keysafe

https://www.box.com/resources/dm/ccm-government/itar?utm_source=Google&utm_medium=SEM&utm_campaign=dm-google-sem-na-eng-brand&utm_keyword=box%20itar&id=7010e000001PaCyAAK&utm_content=560496740567%7Ckwd-1071701363988%7Cm&gcl...

https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-platform-service-description/office-365-us-government/gcc-high-and-dod

In case anyone like me couldn't find the tiny "register here" link at the bottom:

Implications of Defending IT and OT for DoD and Defense Industrial Base from CMMC to JADC2 (office.com)

As someone who does this for a living, I would highly suggest only hiring people who

1. have credentials, such as CISSP, GIAC or CISA
2. have had the experience of a SSP go through a government inspection and received an Interim Approval To Operate (IATO) and Approval To Operate (ATO).

I've seem some outsourced folks on upwork.com who look like they fit the bill.

Hope this helps!

https://www.splunk.com/en_us/blog/public-sector/introducing-the-splunk-for-cmmc-solution.html

Splunk has a pre-built solution for CMMC Mappings. There are a few partners who can help you get it configured or even fully managed, such as Tekstream and NuHarbor

Ahh sorry, I probably should have specified the publication, we are using 800-53, right now we are using an excel spreadsheet. one of the solutions that I'm looking at is this website( https://clickup.com/ ). I guess I was hoping for an all in one software solution.

Do you label the USB drives or the envelope they are inside given the USB is a bit too small?

For folders, boxes for offsite storage, we can use these labels.

https://www.amazon.com/dp/B071XYYTKB?th=1

We have several hundred boxes of CUI in a file storage facility, would we need to label the ones already in storage or just those going out now?