FAQ Category: Risk Assessments

Why risk assessments?

04/17/2024

LeveL5Cyber’s Risk Assessments enable organizations to inform and prioritize decisions regarding cybersecurity. The services take into consideration today’s evolving threat landscape to drive cybersecurity priorities with an outcome-driven approach using industry standard processes.

How long do risk assessments take to complete?

04/17/2024

While timing can vary, most Assessments will take approximately five to six weeks to complete. Program Development services may take longer based on the scope.

What is IEC62443?

04/16/2024

The ISA/IEC 62443 series of standards define requirements and processes for implementing and maintaining electronically secure industrial automation and control systems (IACS). These standards set best practices for security and provide a way to assess the level of security performance.

What is NIST SP 800-82?

03/28/2024

A NIST Special Publication provides guidance on how to secure operational technology (OT) while addressing their unique performance, reliability, and safety requirements. OT encompasses a broad range of programmable systems and devices that interact with the physical environment (or manage devices that interact with the physical environment). These systems and devices detect or cause a […]

What is NIST SP 800-171?

03/28/2024

A NIST Special Publication that provides recommended requirements for protecting the confidentiality of controlled unclassified information (CUI)

What is Federal Acquisition Regulation (FAR)?

03/28/2024

A system established for the publication of uniform policies and procedures for acquisition by executive agencies.

What is a CMMC assessment?

03/28/2024

The CMMC is intended to serve as a verification mechanism to ensure that DIB companies implement appropriate cybersecurity practices and processes to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) within their unclassified networks. Many of LeveL5Cyber’s team members have come directly from this type of environment and understand the challenges that it […]

What vulnerabilities are prevalent in manufacturing environments?

03/28/2024

As the world continues to advance technologically, more and more devices, namely IoT devices, are being connected to the Internet in order to increase efficiency and automation in various industries, including manufacturing. However, as we move towards a more interconnected world, it becomes increasingly important to consider the potential security threats that come with this […]

What is the difference between an accelerated risk assessment and a traditional risk assessment?

03/28/2024

L5C is committed to providing “right-sized” solutions and recognizes a traditional assessment may not always be the appropriate starting point. A traditional, deep assessment can often give you controls to put in place that are not feasible without the right foundation. LeveL5Cyber offers an accelerated OT risk assessment designed for early-stage OT cybersecurity programs. We focus […]

What is Controlled Unclassified Information (CUI)?

03/28/2024

CUI is information the Government creates or possesses, or that an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls. A CUI Registry provides information on the specific categories and subcategories of information that […]