<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:media="http://search.yahoo.com/mrss/" >

<channel>
	<title>configuration drift &#8211; SteelCloud</title>
	<atom:link href="https://www.steelcloud.com/tag/configuration-drift/feed/" rel="self" type="application/rss+xml" />
	<link>https://www.steelcloud.com</link>
	<description></description>
	<lastBuildDate>Mon, 02 Nov 2026 19:21:14 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.4</generator>

<image>
	<url>https://www.steelcloud.com/wp-content/uploads/favicon.png</url>
	<title>configuration drift &#8211; SteelCloud</title>
	<link>https://www.steelcloud.com</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>CMMC Level 2 Requirements During the Phase II Suspension: Getting the Self-Assessment Right</title>
		<link>https://www.steelcloud.com/cmmc-level-2-requirements-self-assessment/</link>
		
		<dc:creator><![CDATA[ovatekweb]]></dc:creator>
		<pubDate>Mon, 02 Nov 2026 19:21:14 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[C3PAO]]></category>
		<category><![CDATA[CMMC]]></category>
		<category><![CDATA[CMMC Level 2+]]></category>
		<category><![CDATA[CMMC Readiness]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[Continuous Compliance]]></category>
		<category><![CDATA[CUI]]></category>
		<category><![CDATA[Defense Industrial Base]]></category>
		<category><![CDATA[DIB]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[NIST SP 800-171]]></category>
		<category><![CDATA[self assessment]]></category>
		<category><![CDATA[unified automation]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=92170</guid>

					<description><![CDATA[CMMC Level 2 requirements still apply during the Phase II suspension. Learn what changed, what did not and how to keep your self-assessment accurate.]]></description>
		
		
		
			</item>
		<item>
		<title>Baseline Security: The Forgotten Pillar of Cybersecurity Awareness Month</title>
		<link>https://www.steelcloud.com/cybersecurity-awareness-month-secure-configuration/</link>
		
		<dc:creator><![CDATA[ovatekweb]]></dc:creator>
		<pubDate>Mon, 19 Oct 2026 20:30:50 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[CIS Benchmarks]]></category>
		<category><![CDATA[cisa]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[ConfigOS MPO]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[cybersecurity awareness month]]></category>
		<category><![CDATA[Secure baseline]]></category>
		<category><![CDATA[Secure Configurations]]></category>
		<category><![CDATA[STIG]]></category>
		<category><![CDATA[system hardening]]></category>
		<category><![CDATA[unified automation]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=92142</guid>

					<description><![CDATA[Cybersecurity Awareness Month covers passwords, MFA and phishing. See why secure configuration is the forgotten pillar, plus a 9-step checklist.]]></description>
		
		
		
			</item>
		<item>
		<title>How CIS Benchmarks Help Protect Water Utilities From Cyberattacks</title>
		<link>https://www.steelcloud.com/it-and-ot-security-water-utilities/</link>
		
		<dc:creator><![CDATA[ovatekweb]]></dc:creator>
		<pubDate>Fri, 02 Oct 2026 17:09:38 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[CIS Benchmarks]]></category>
		<category><![CDATA[cis controls]]></category>
		<category><![CDATA[cisa]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[critical infrastructure]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[operational technology]]></category>
		<category><![CDATA[OT]]></category>
		<category><![CDATA[OT/IT]]></category>
		<category><![CDATA[OT/SCADA]]></category>
		<category><![CDATA[SLED]]></category>
		<category><![CDATA[Water Industry]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=92120</guid>

					<description><![CDATA[IT and OT convergence gave attackers a path into water utility PLCs. See how CIS Benchmarks and automation harden the IT systems that can reach your OT.]]></description>
		
		
		
			</item>
		<item>
		<title>The Educator’s Guide to CIS Benchmarks Adoption</title>
		<link>https://www.steelcloud.com/cis-benchmarks-for-higher-education/</link>
		
		<dc:creator><![CDATA[ovatekweb]]></dc:creator>
		<pubDate>Mon, 14 Sep 2026 21:19:28 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[CIS Benchmarks]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[cybersecurity]]></category>
		<category><![CDATA[FERPA]]></category>
		<category><![CDATA[Higher Ed]]></category>
		<category><![CDATA[higher education]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=92079</guid>

					<description><![CDATA[CIS Benchmarks for higher education: how universities standardize hardening across campuses, support GLBA and PCI DSS, and stop configuration drift.]]></description>
		
		
		
			</item>
		<item>
		<title>CIS Benchmarks vs STIGs: Which Is Right for You?</title>
		<link>https://www.steelcloud.com/cis-benchmarks-vs-stigs/</link>
		
		<dc:creator><![CDATA[ovatekweb]]></dc:creator>
		<pubDate>Thu, 20 Aug 2026 19:11:52 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[Automation]]></category>
		<category><![CDATA[baseline hardening]]></category>
		<category><![CDATA[CIS Benchmarks]]></category>
		<category><![CDATA[cis stig standards]]></category>
		<category><![CDATA[Compliance]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[Disa STIG]]></category>
		<category><![CDATA[STIGs]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=92029</guid>

					<description><![CDATA[STIGs are mandatory for DoW systems; CIS Benchmarks are the commercial standard. Compare both and see how to keep either baseline continuously enforced.]]></description>
		
		
		
			</item>
		<item>
		<title>Zero Trust: How to Adapt Accordingly</title>
		<link>https://www.steelcloud.com/zero-trust-how-to-adapt-accordingly/</link>
		
		<dc:creator><![CDATA[Becky Brown]]></dc:creator>
		<pubDate>Tue, 15 Feb 2022 18:03:08 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[cisa]]></category>
		<category><![CDATA[compliance mandates]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Defensive line]]></category>
		<category><![CDATA[DFARS]]></category>
		<category><![CDATA[DoD]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[FedRAMP]]></category>
		<category><![CDATA[IT infrastructure]]></category>
		<category><![CDATA[lot vulnerabilities]]></category>
		<category><![CDATA[mitre att&ck]]></category>
		<category><![CDATA[ransomware]]></category>
		<category><![CDATA[ransomware attacks]]></category>
		<category><![CDATA[Security Technical Implementation Guide]]></category>
		<category><![CDATA[STIG compliance]]></category>
		<category><![CDATA[stig policy]]></category>
		<category><![CDATA[system hardening]]></category>
		<category><![CDATA[Zero Trust]]></category>
		<category><![CDATA[Zero Trust: How to adapt accordingly]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=83009</guid>

					<description><![CDATA[Zero Trust: How to adapt accordingly with secure and compliant baselines using automation January’s OMB Memorandum detailing the White House Executive Order on Zero Trust has government and defense industrial base (DIB) organizations talking. In last week’s Tech Talk Tuesday, we shared some basics of Zero Trust, including a refresher on network access control (NAC) ...]]></description>
		
		
		
			</item>
		<item>
		<title>Zero Trust, NAC and a New Era of Cybersecurity</title>
		<link>https://www.steelcloud.com/zero-trust-nac-and-a-new-era-of-cybersecurity/</link>
		
		<dc:creator><![CDATA[Becky Brown]]></dc:creator>
		<pubDate>Mon, 07 Feb 2022 16:56:18 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[cisa]]></category>
		<category><![CDATA[compliance mandates]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Defensive line]]></category>
		<category><![CDATA[DFARS]]></category>
		<category><![CDATA[DoD]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[FedRAMP]]></category>
		<category><![CDATA[IT infrastructure]]></category>
		<category><![CDATA[lot vulnerabilities]]></category>
		<category><![CDATA[mitre att&ck]]></category>
		<category><![CDATA[ransomware]]></category>
		<category><![CDATA[ransomware attacks]]></category>
		<category><![CDATA[Security Technical Implementation Guide]]></category>
		<category><![CDATA[STIG compliance]]></category>
		<category><![CDATA[stig policy]]></category>
		<category><![CDATA[system hardening]]></category>
		<category><![CDATA[Zero Trust]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=82984</guid>

					<description><![CDATA[The game is well underway when talking about Zero Trust, NAC and ushering in the new era of cybersecurity In January, the US Office of Management and Budget (OMB) presented its Federal Zero Trust Memorandum on Improving the Cybersecurity of National Security, Department of Defense, and Intelligence Community Systems. It focuses primarily on a Zero ...]]></description>
		
		
		
			</item>
		<item>
		<title>eMASS Automation and Uniting the Missing Security Compliance Data</title>
		<link>https://www.steelcloud.com/emass-automation-and-uniting-the-missing-security-compliance-data/</link>
		
		<dc:creator><![CDATA[Becky Brown]]></dc:creator>
		<pubDate>Tue, 11 Jan 2022 15:55:04 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[CDM]]></category>
		<category><![CDATA[CIS]]></category>
		<category><![CDATA[cis controls]]></category>
		<category><![CDATA[compliance drift]]></category>
		<category><![CDATA[compliance mandates]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[DFARS]]></category>
		<category><![CDATA[disa stigs]]></category>
		<category><![CDATA[endpoint security]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[FedRAMP]]></category>
		<category><![CDATA[information assurance]]></category>
		<category><![CDATA[IT infrastructure]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[nist 800-53]]></category>
		<category><![CDATA[STIG compliance]]></category>
		<category><![CDATA[stig policy]]></category>
		<category><![CDATA[system drift]]></category>
		<category><![CDATA[system hardening]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=82869</guid>

					<description><![CDATA[How eMASS Automation Unites the Missing Security Compliance Data eMASS, or the Enterprise Mission Assurance Support Service, was developed by the DoD, in part, as a repository that unites technical/machine data generated from endpoint scans with the human/non-technical data documented by security/IA personnel.  Traditionally the “uniting” process is accomplished by completing a STIG Viewer Checklist ...]]></description>
		
		
		
			</item>
		<item>
		<title>Toast the Holidays with Our “Triple-Sec” Gift!</title>
		<link>https://www.steelcloud.com/toast-the-holidays-without-our-triple-sec-gift/</link>
		
		<dc:creator><![CDATA[Becky Brown]]></dc:creator>
		<pubDate>Wed, 15 Dec 2021 18:29:17 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[CDM]]></category>
		<category><![CDATA[CIS]]></category>
		<category><![CDATA[cis controls]]></category>
		<category><![CDATA[compliance mandates]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[DevOps]]></category>
		<category><![CDATA[DFARS]]></category>
		<category><![CDATA[DoD]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[FedRAMP]]></category>
		<category><![CDATA[information assurance]]></category>
		<category><![CDATA[IT infrastructure]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[nist 800-53]]></category>
		<category><![CDATA[STIG compliance]]></category>
		<category><![CDATA[stig policy]]></category>
		<category><![CDATA[system drift]]></category>
		<category><![CDATA[system hardening]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=82818</guid>

					<description><![CDATA[It wouldn&#8217;t be the Holidays without Our “Triple-Sec” Gift!  As 2021 comes to a close, we wanted to offer our readers something special—our top three cybersecurity resources for 2021. Every DoD and contractor library should be stocked with these reports defining and describing your security mission and how to accomplish it effectively and efficiently. With ...]]></description>
		
		
		
			</item>
		<item>
		<title>Moving Forward with Zero Trust and the Cybersecurity Executive Order</title>
		<link>https://www.steelcloud.com/moving-forward-with-zero-trust-and-the-cybersecurity-executive-order/</link>
		
		<dc:creator><![CDATA[Becky Brown]]></dc:creator>
		<pubDate>Tue, 30 Nov 2021 13:06:40 +0000</pubDate>
				<category><![CDATA[All Resources]]></category>
		<category><![CDATA[Articles]]></category>
		<category><![CDATA[cisa]]></category>
		<category><![CDATA[compliance mandates]]></category>
		<category><![CDATA[ConfigOS]]></category>
		<category><![CDATA[configuration drift]]></category>
		<category><![CDATA[cybersecurity executive order]]></category>
		<category><![CDATA[data breach]]></category>
		<category><![CDATA[Defensive line]]></category>
		<category><![CDATA[DFARS]]></category>
		<category><![CDATA[DoD]]></category>
		<category><![CDATA[Federal Contractor]]></category>
		<category><![CDATA[FedRAMP]]></category>
		<category><![CDATA[IT infrastructure]]></category>
		<category><![CDATA[lot vulnerabilities]]></category>
		<category><![CDATA[mitre att&ck]]></category>
		<category><![CDATA[ransomware]]></category>
		<category><![CDATA[ransomware attacks]]></category>
		<category><![CDATA[Security Technical Implementation Guide]]></category>
		<category><![CDATA[STIG compliance]]></category>
		<category><![CDATA[stig policy]]></category>
		<category><![CDATA[system hardening]]></category>
		<category><![CDATA[Zero Trust]]></category>
		<guid isPermaLink="false">https://www.steelcloud.com/?p=82748</guid>

					<description><![CDATA[Cybersecurity Executive Order  It has been a little over six months since the White House released their Cybersecurity Executive Order (EO) mandating, among other things, a move toward both the cloud and Zero Trust architectures for government agencies. So, where do we stand? In December, the Pentagon is expected to launch its Zero Trust office ...]]></description>
		
		
		
			</item>
	</channel>
</rss>
