Compliance Services

Using data effectively is critical to supporting the mission to the federal government agencies and programs. PKH Enterprises has more than 15 years of experience in helping agencies build programs that better leverage their data. Whether you have an existing compliance and data management program that needs a tune-up or are working to set up a new program, PKH offers a full spectrum of compliance and data management services that can help you with the key areas of data management:

Data Management

Governance
Strategy
Stakeholder Engagement
Information Sharing
Open Data Analysis
Standards and Architecture
Building Maturity and Maturity Assessment
Improving Data Modernization programs across your enterprise

All of these key activities need to become regular and predictable activities across the enterprise to allow new systems and technology innovation to flourish. We also have experience in other key data areas: CUI implementation, Privacy and Records.

CMMC

Basic Safeguarding of Covered Contractor Information Systems is the most basic computer security requirement that was first adopted in 2016. This requirement applies to all systems that house any Federal Contracts Information (FCI). FCI is defined as any information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public websites) or simple transactional information, such as necessary to process payments. This definition is very broad, so you should generally assume that if you hold a contract, you have FCI, and that these requirements apply to you. There are 15 safeguarding requirements outlined in the FAR document that are geared towards establishing and maintaining basic cyber hygiene. If you are not meeting these requirements within your organization, this is the place to start.

PKH Enterprises offers CMMC evaluation, guidance and roadmaps to help you comply with these requirements. Contact us today to set up an appointment with one of our CMMC Compliance experts.

CDO Support

As your CDO tackles the range of data issues across the enterprise, we can support the CDO in maturing their program. Understanding the authorities and responsibilities of the office and building strong stakeholder relationships to create a strategy to implement.

CUI Implementation

Control of sensitive data should be part of your data management program. We have experience implementing policy training and guidance in implementing the rules surrounding CUI from both a technology and a workforce perspective.

Privacy Program Support

We have experience designing security into technology and assisting in complex programs to ensure that privacy and civil rights and civil liberties are addressed. We have developed PIAs, SORNs, waiver requests in the federal register. We work with technologists to understand how to implement the FIPPS into their technology and their programs.

Records Management

Now that records programs must provide information digitally to NARA, records management is a data management process. We can assist in how to integrate your legacy processes with your data management programs.

From the Blog

DHS launching a CDO office and CMMC-like risk management program!

Acting CDO Carlene Lleto is working on eight priority domains that include immigration, law enforcement and cybersecurity. The need for CDO offices was revealed during the COVID-19 pandemic. DHS launched a department wide COVID 19 vaccination campaign in partnership with Department of Veterans Affairs health center. The problem arose when DHS needed to get in contact with workers and it required “extensive time and effort to collecting and reconciling many different datasets from across the department.”

Cyberattacks causing many small companies to go out of business!

During the present-day digital transformation, cybercrime is becoming the number one form of criminal activity. “43% of online attacks are aimed at small businesses” and many aren’t prepared to defend themselves during these attacks! It is recommended that small business owners look into privacy programs to help support and protect vital information.

Information Management and Security Incorporation

CUI serves as a label to simplify the ways that information is safeguarded and shared both within and amongst Executive Agencies and their customers. CUI provides universality by allowing for a standardized system of protection used by all Executive Agencies that will minimize any potential gaps in practice that may vary from agency to agency. In today’s world, agencies managing CUI must also manage risk from telework due to COVID.

Developments In 5G

With 5G comes a host of new innovation: Greater precision and improved reaction times in drones and autonomous vehicles, new wearable tech with additional features, advances and greater adoption of Internet of Things (IoT) devices and smart city developments, and remote healthcare. 5G also ushers in a new age of smart warfighter.

Costs of Privacy Breaches and Cyber Incidents to SMBs

According to a study conducted by Ponemon Institute in 2017, 61% of SMBs stated that their companies have experienced a cyber attack in the past 12 months, and 54% of SMBs reported that they had privacy breaches involving customers, target customers and employee information. This should be a sobering wake up call for SMB owners to start investing in cybersecurity. Moreover, the costs, due to cyberattacks, incurred on SMBs are often high and have lasting future impacts.

Blog Articles Slider