In this episode of the Quality Hub, Chatting with ISO Experts, Xavier Francis and Reagan Jorgensen continue their discuss on “What to do after a Cyber Attack.” They focus on the critical importance of having an Incident Response Plan (IRP) in place before a cyber-attack occurs. They explain the parts of what goes into an IRP, and also highlight the role of employee training as a key defense mechanism, enabling staff to recognize and respond to threats effectively. They conclude with advice on evaluating and improving an organization's security posture post-attack, starting with a security assessment even if a full IRP isn't yet in place.

Helpful Resources:

Cyber Attacks Explained: https://www.thecoresolution.com/cyber-attacks-explained

Cybersecurity Checklist: https://www.thecoresolution.com/cybersecurity-checklist

Cyber Hygiene: https://www.thecoresolution.com/cybersecurity-checklist

Cybersecurity Explained: https://www.thecoresolution.com/cybersecurity-explained

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources

In this episode of the Quality Hub Podcast, Xavier Francis and Reagan Jorgensen, a Security Solutions Technician from CORE Business Solutions, discuss "What to Do After a Cyber Attack," The conversation highlights the importance of isolating affected systems to prevent the attack from spreading and quickly activating an Incident Response Plan (IRP) to assess the breach. Reagan emphasizes the need to secure logs and data for forensic investigation, maintain communication, and ensure business continuity. The episode also covers the significance of a thorough post-attack forensic investigation with an emphasis on regulatory compliance, especially in sensitive sectors like government and healthcare.

Helpful Resources:

Cyber Attacks Explained: https://www.thecoresolution.com/cyber-attacks-explained

Cybersecurity Checklist: https://www.thecoresolution.com/cybersecurity-checklist

Cyber Hygiene: https://www.thecoresolution.com/cybersecurity-checklist

Cybersecurity Explained: https://www.thecoresolution.com/cybersecurity-explained

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources

In the final episode of “Purchasing” on the Quality Hub podcast, Xavier Francis, Murphy Shaw and Matthew Pilley conclude their discussion on ISO 9001 Clause 8.4.3, focusing on ensuring the adequacy of requirements communicated to external providers. Matthew emphasizes the importance of clearly defining and documenting all supplier requirements, while Murphy highlights that at Core, they help clients establish effective purchasing processes using formal documentation. They stress the need for clear, formal communication, outline the essential information to include, and discuss managing changes to requirements. Finally, they touch on the complexities of purchasing in different industries, including service and tech companies, and the criticality of clear communication to ensure quality and compliance.

Helpful Resources:

https://www.thecoresolution.com/clause-8-4-3-iso-9001-2015-explained

https://www.thecoresolution.com/8-4-purchasing-iso-explained

For All Things ISO 9001:2015: https://www.thecoresolution.com/iso-9001-2015

Contact us at 866.354.0300 or email us at [email protected]

ISO 9001 Standards: https://www.thecoresolution.com/iso-90012015-standard-1

A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources

ISO 9001 Consulting: https://www.thecoresolution.com/iso-consulting

In the second part of “Purchasing” on the Quality Hub podcast, Xavier Francis, along with Murphy Shaw and Matthew Pilley from Core Business Solutions, delve into Clause 8.4.2 of the ISO 9001 standard, focusing on supplier controls. Murphy explains the importance of controlling supplier quality to prevent negative impacts on the organization and its customers. Matthew describes Core’s approach, which includes drafting a supplier management process within the quality manual and defining purchasing as a key process. They discuss best practices for supplier controls including clear contracts, performance evaluations, and more and how to foster effective communication of expectations and capacities to suppliers. Murphy and Matthew also discuss methods for monitoring supplier performance and handling non-conforming products. They also state how CORE helps to manage these processes efficiently.

Helpful Resources:

https://www.thecoresolution.com/clause-8-4-2-iso-9001-2015

https://www.thecoresolution.com/8-4-purchasing-iso-explained

For All Things ISO 9001:2015: https://www.thecoresolution.com/iso-9001-2015

Contact us at 866.354.0300 or email us at [email protected]

ISO 9001 Standards: https://www.thecoresolution.com/iso-90012015-standard-1

A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources

ISO 9001 Consulting: https://www.thecoresolution.com/iso-consulting

In part 1 of "Purchasing" on the Quality Hub podcast,  hosted by Xavier Francis, Murphy Shaw and Matthew Pilley from Core Business Solutions discuss the intricacies of ISO 9001 Clause 8.4.1. They explain the necessity of having a structured approach to supplier selection, evaluation, and monitoring to ensure consistent quality and compliance with standards. Key practices include creating an approved supplier list, documenting evaluations, and regularly reviewing supplier performance. The conversation highlights the importance of having multiple suppliers to mitigate risks, particularly in challenging situations like supply chain disruptions. They also discuss how CORE offers electronic tools to streamline these processes for their clients, ensuring efficient management and compliance.

Helpful Resources:

https://www.thecoresolution.com/what-is-clause-8-4-1-of-iso-9001-2015-about

https://www.thecoresolution.com/8-4-purchasing-iso-explained

For All Things ISO 9001:2015: https://www.thecoresolution.com/iso-9001-2015

Contact us at 866.354.0300 or email us at [email protected]

ISO 9001 Standards: https://www.thecoresolution.com/iso-90012015-standard-1

A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources

ISO 9001 Consulting: https://www.thecoresolution.com/iso-consulting

In this episode of Quality Hub podcast, Xavier Francis and Scott Dawson continue their discussion on strategies for complying with the Cybersecurity Maturity Model Certification (CMMC). They explore three main approaches for securing Controlled Unclassified Information (CUI). The conversation emphasizes the complexity and costs associated with each option, highlighting that certain solutions can simplify your compliance. Scott introduces the Core Vault as an example, explaining its benefits and how it helps small businesses achieve compliance efficiently. The episode concludes with advice on conducting a gap assessment to determine the best path forward for companies seeking CMMC certification.

Helpful Resources:

https://www.thecoresolution.com/cybersecurity-webinars

https://www.thecoresolution.com/nist-cmmc-3

https://www.thecoresolution.com/cmmc-compliance-overview

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources

In this episode of Quality Hub podcast, Xavier Francis and Scott Dawson continue their discussion on strategies for complying with the Cybersecurity Maturity Model Certification (CMMC). They explore three main approaches for securing Controlled Unclassified Information (CUI). The conversation emphasizes the complexity and costs associated with each option, highlighting that certain solutions can simplify your compliance. Scott introduces the Core Vault as an example, explaining its benefits and how it helps small businesses achieve compliance efficiently. The episode concludes with advice on conducting a gap assessment to determine the best path forward for companies seeking CMMC certification.

Helpful Resources:

https://www.thecoresolution.com/cybersecurity-webinars

https://www.thecoresolution.com/nist-cmmc-3

https://www.thecoresolution.com/cmmc-compliance-overview

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources

In this episode of the Quality Hub podcast Xavier Francis hosts Scott Dawson, President of Core Business Solutions, to discuss effective strategies for complying with the Cybersecurity Maturity Model Certification (CMMC). They delve into the importance of understanding CMMC requirements, particularly for small businesses deciding whether to pursue Department of Defense (DoD) contracts. The conversation highlights the necessity of protecting Controlled Unclassified Information (CUI) by meeting all 110 requirements of NIST 800-171, and emphasizes the important steps in defining the scope of a CMMC assessment. The episode concludes with advice on preparing for assessments and ensuring all security measures are validated.

In this episode of the Quality Hub podcast, Xavier Francis hosts Scott Dawson, President of Core Business Solutions, to discuss effective strategies for complying with the Cybersecurity Maturity Model Certification (CMMC). They delve into the importance of understanding CMMC requirements, particularly for small businesses deciding whether to pursue Department of Defense (DoD) contracts. The conversation highlights the necessity of protecting Controlled Unclassified Information (CUI) by meeting all 110 requirements of NIST 800-171 and emphasizes the important steps in defining the scope of a CMMC assessment. The episode concludes with advice on preparing for assessments and ensuring all security measures are validated.

Helpful Resources:

https://www.thecoresolution.com/cybersecurity-webinars

https://www.thecoresolution.com/nist-cmmc-3

https://www.thecoresolution.com/cmmc-compliance-overview

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources

In Part 2 of Basics of CMMC, on the Quality Hub podcast, Xavier Francis and Scott Dawson, President of Core Business Solutions, continue to discuss the challenges of implementing the Cybersecurity Maturity Model Certification (CMMC). They highlight the technical complexity and advanced IT expertise required to meet CMMC standards, particularly for small businesses that lack extensive IT resources. Scott discusses the ongoing maintenance needed to uphold security measures and the potential legal implications of non-compliance. They also emphasize the necessity of a cultural shift within organizations dealing with CMMC and underscore the importance of cybersecurity in protecting national security and the need for continuous training and adherence to CMMC requirements.

Helpful Resources:

https://www.thecoresolution.com/cybersecurity-webinars

https://www.thecoresolution.com/nist-cmmc-3

https://www.thecoresolution.com/cmmc-compliance-overview

Contact us at 866.354.0300 or email us at [email protected]

Articles: https://www.thecoresolution.com/free-learning-resources