Reporting Your DoD Self Assessment (SPRS) Score: What to Know
by Kelly O’Brien on June 10, 2025 at 2:59 PM
If you contract with the Department of Defense (DoD)—directly or indirectly—you’re likely required to report a cybersecurity self-assessment score to the Supplier Performance Risk System (SPRS). SPRS is a web-based system used by the DoD to track and assess contractor performance and …
What Makes an Industry-Leading Cyber Insurance Policy Today?
by Kelly O’Brien on May 7, 2025 at 11:28 AM
Cyber insurance is no longer a niche product or an optional safeguard—it has become a critical pillar of enterprise risk management. As cyberattacks grow more sophisticated and regulatory pressures tighten, organizations of all sizes are reevaluating what they expect from their cyber …
CJIS Security Policy v6.0 – Key Updates You Need to Know
by Kelly O’Brien on February 10, 2025 at 2:15 PM
The Criminal Justice Information Services (CJIS) Security Policy v6.0, released on December 27, 2024, introduces significant modernization efforts aimed at enhancing security, compliance, and risk management in handling Criminal Justice Information (CJI). As technology and cyber threa …
Cyber Insurance in 2025: Navigating Emerging Threats & Trends
by Kelly O’Brien on February 6, 2025 at 4:20 PM
As we enter 2025, the cyber insurance landscape is undergoing transformative changes driven by escalating cyber threats, shifting regulatory requirements, and evolving market conditions. Businesses must proactively stay informed on these trends to safeguard their digital assets, optim …
Cyber Insurance & AI: Are You Fully Covered and Secure?
by Kelly O’Brien on November 7, 2024 at 12:15 PM
In today’s fast-evolving landscape, generative artificial intelligence (GenAI) is transforming nearly every industry, including insurance. From underwriting and claims processing to customer engagement, AI's integration brings a wealth of new opportunities—as well as complex risks tha …
New CJIS Requirements: What You Need to Know
by Kelly O’Brien on March 20, 2024 at 2:45 PM
In a recent Compass IT Compliance blog, we delved into the fundamentals of the Criminal Justice Information Services (CJIS) Security Policy (CSP), its applicability, and the criticality of CJIS Compliance, terminology, and the thirteen policy areas applicable at the time of that writi …