There is a misperception about Microsoft Office 365 government cloud that if you purchase GCC or GCC High, your organization is well on its way to CMMC compliance. Given the fact that the platform supports the controls and is FedRAMP
The Compliance Gaps Software Alone Won’t Close For You Read More »
Across the Defense Industrial Base (DIB), cybersecurity numbers appear to be moving in the right direction. According to the 2026 State of the Defense Industrial Base Report, the average self‑reported SPRS score reached +51, a five‑year high. But the same research revealed that confidence in the accuracy of those
SPRS Scores Are Rising. Confidence Is Falling. What That Means for CMMC Compliance. Read More »
On Sept. 1, Honeywell Aerospace agreed to pay more than $2 million to settle False Claims Act allegations that it failed to comply with NIST SP 800-171 cybersecurity requirements on a Pentagon contract. The case, which stemmed from a whistleblower
Steptoe’s Michael Gruden Breaks Down CMMC Compliance and Enforcement at CMMC CON 2026 Read More »
On July 13, the Pentagon suspended CMMC Phase 2, pausing mandatory third-party certification requirements while the Department conducts a 60-day review of the program. The announcement created immediate questions across the defense industrial base (DIB) about what changed, what did
Pentagon’s James Mismash to Keynote CMMC CON 2026 Read More »
AI has changed the cybersecurity calculus for every business. Attackers are using it to automate reconnaissance, personalize phishing at scale, and develop malware that adapts in real time. For defense contractors handling Controlled Unclassified Information, the stakes are higher. The
Microsoft’s Chief Security Advisor Talks AI Threats at CMMC CON 2026 Read More »
The Pentagon suspended CMMC Phase 2 in July, but prime contractors may not be as trusting of self-reported compliance scores as the government is. Earlier this year, L3Harris gave its suppliers roughly 80 business days to produce CMMC Level 2
Get the Prime Contractor Perspective on CMMC Compliance at CMMC CON 2026 Read More »
If you’ve spoken to a Microsoft 365 reseller recently, you were likely told you need GCC High, without an assessment of your environment, a review of your contracts, or a conversation about the types of data you handle. In some
Which Microsoft Office 365 Level Do You Need? Read More »
The suspension of CMMC Phase 2 took mandatory third-party C3PAO assessments off the table — for now. But the Pentagon’s Defense Contract Management Agency continues to conduct assessments of contractor compliance with NIST SP 800-171. In June, those assessments led
Get the legal perspective on CMMC enforcement at CMMC CON 2026 Read More »
The Department of Defense’s decision to pause CMMC Phase 2 implementation created immediate uncertainty across the Defense Industrial Base (DIB). Many contractors began asking the same questions: Is CMMC still moving forward? Should we pause our compliance efforts? Do NIST
The CMMC Phase 2 Pause Explained: What Defense Contractors Need to Know Now Read More »
CMMC Phase 2 implementation may be changing. The mission to protect the Defense Industrial Base remains. The Department of War’s decision to pause CMMC Phase 2 implementation has created significant discussion across the Defense Industrial Base. For many contractors, the
The CMMC Pause: What Defense Contractors Need to Know Read More »
