Schellman

If you're attending the GovForward FedRAMP Summit tomorrow, be sure to catch Schellman's Matt Hungate at 2:15 PM ET as he presents "Scaling FedRAMP: Reaching 4,500 Products Through Industry and Government Collaboration." Scaling the FedRAMP marketplace to meet growing demand for secure cloud solutions will require deeper collaboration between government and industry.  Matt's session will explore how FedRAMP 20x initiatives, including automation, authorization reuse, and machine-readable validation, can reduce friction in the authorization process while helping agencies accelerate the adoption of secure cloud solutions. As a proud sponsor of this year's summit, we're looking forward to connecting with attendees throughout the day. Register here: https://lnkd.in/g2ZKVRty 

Planning a FedRAMP authorization when the rules just changed is harder than it sounds. On August 5 at 2:00 PM ET, Schellman's Nick Rundhaug is joined by Tim Sandage and Corey Clements from SecureIT to break down exactly what that looks like under 20X.

Let's keep the conversations going after the GovForward FedRAMP Summit 🤝 Join Schellman, Second Front, and Salesforce Ventures on July 23 from 4:30 to 6:30 p.m. at Boqueria Penn Quarter for an evening of networking with the national security and defense tech community. No panels. No pitches. Just great food and the opportunity to connect with industry peers, exchange ideas, and build new relationships. Register here: https://lnkd.in/g8ru6-fM

What does assessment readiness actually look like for organizations pursuing both CMMC Level 2 certification and FedRAMP authorization?    On July 22 at 1:00 PM ET, hear from Schellman's Timothy Walsh, Jonathan Coffelt, alongside Chainguard’s John Osborne, as they discuss what assessors look for, common readiness gaps, and how software supply chain security and container hardening can help support both frameworks.    Register for the event here: https://lnkd.in/eX5VRvYX 

ISO/IEC 42001 follows a familiar management system framework, but one requirement sets it apart.    Before implementing an Artificial Intelligence Management System (AIMS), organizations must formally define their role in relation to the AI systems within scope. That distinction shapes everything from your responsibilities and documentation to the controls you implement and what auditors expect to see.    Learn more about role awareness, Annex A's 38 controls, and key certification considerations in our recent blog: https://lnkd.in/gAkbN6AN  

Building an AI governance program when the rules keep changing is harder than it sounds. On July 15 at 2:30 PM EST, Danny Manimbo, Tristan Ingold, and Daniel Pietragallo of Buchalter will tackle exactly that.

CMMC Phase II has been suspended, but don't mistake the pause for a change in your cybersecurity obligations. While DoW has paused the requirement for third-party CMMC Level 2 certification assessments pending a 60-day review, NIST SP 800-171 and DFARS 252.204-7012 requirements remain in effect. Prime contractors may also continue to enforce their own cybersecurity expectations. Whether you've already achieved certification or are evaluating your next steps, now is the time to reassess your compliance roadmap, not put it on hold. Read our latest blog to understand what this means for your organization and how to prepare for what's next: https://hubs.ly/Q04pvpQf0

AI regulations will continue to evolve, but effective governance shouldn’t depend on keeping up with every new requirement.    Tomorrow at 2:30 PM ET, Tristan Ingold, Schellman's Danny Manimbo, and Buchalter's Daniel Pietragallo (AIGP, CIPP/US, FIP) will discuss what it takes to build AI governance programs that can adapt to changing regulations.    The conversation will cover the U.S. regulatory landscape, lessons from enterprise AI governance, and how ISO 42001 can help organizations establish a flexible governance foundation.    Register here to join: https://hubs.ly/Q04ng-Ls0 

This Disability Pride Month, we celebrate the unique perspectives, experiences, and strengths that make our workplace stronger.    At Schellman, we're proud to celebrate the people and perspectives that make our culture stronger every day. 

The conversation around the EU AI Act is quickly shifting from understanding the regulation to demonstrating compliance.    That's where emerging frameworks like prEN 18286 come in. Designed to support EU AI Act governance, the draft standard complements ISO 42001 by providing a structured, auditable approach to AI risk management, accountability, and documentation.    Learn how these two frameworks work together to help organizations build AI governance programs that are ready for evolving regulatory expectations in our blog: https://hubs.ly/Q04dXpjj0