On July 13, the Pentagon suspended CMMC Phase 2, pausing mandatory third-party certification requirements while the Department conducts a 60-day review of the program. The announcement created immediate questions across the defense industrial base (DIB) about what changed, what did […]
Pentagon’s James Mismash to Keynote CMMC CON 2026 Read More »
AI has changed the cybersecurity calculus for every business. Attackers are using it to automate reconnaissance, personalize phishing at scale, and develop malware that adapts in real time. For defense contractors handling Controlled Unclassified Information, the stakes are higher. The
Microsoft’s Chief Security Advisor Talks AI Threats at CMMC CON 2026 Read More »
The Pentagon suspended CMMC Phase 2 in July, but prime contractors may not be as trusting of self-reported compliance scores as the government is. Earlier this year, L3Harris gave its suppliers roughly 80 business days to produce CMMC Level 2
Get the Prime Contractor Perspective on CMMC Compliance at CMMC CON 2026 Read More »
If you’ve spoken to a Microsoft 365 reseller recently, you were likely told you need GCC High, without an assessment of your environment, a review of your contracts, or a conversation about the types of data you handle. In some
Which Microsoft Office 365 Level Do You Need? Read More »
The suspension of CMMC Phase 2 took mandatory third-party C3PAO assessments off the table — for now. But the Pentagon’s Defense Contract Management Agency continues to conduct assessments of contractor compliance with NIST SP 800-171. In June, those assessments led
Get the legal perspective on CMMC enforcement at CMMC CON 2026 Read More »
Just 1,391 organizations held a final CMMC Level 2 certificate as of the Cyber AB’s May 2026 town hall, up 14% from the month before, with another 47 conditional certificates issued and 140 assessments still in progress. The Pentagon estimates
Learn How a CMMC Assessment Actually Unfolds at CMMC CON 2026 Read More »
CMMC Certification Prep: Don’t Overlook the Affirming Official Most defense contractors preparing for CMMC certification focus on technical controls for access management, encryption, and incident response. Those are undoubtedly crucial, but it’s important to remember there’s a person who has
Learn What the Affirming Official Role Really Requires at CMMC CON 2026 Read More »
You’ve taken the steps to assess your cybersecurity posture against NIST 800-171, implemented the required controls, and now you’re managing and maintaining your compliant state. CMMC audit readiness, otherwise known as operating compliantly, has become a way of life. CMMC
You’ve worked hard to achieve full compliance with CMMC 2.0 by implementing the controls outlined in NIST 800-171. Now it’s time to make sure your system doesn’t decay, sliding you into a non-compliant state. In our last blog, we discussed
How to Stay CMMC-Ready After Certification: Maintaining NIST 800-171 Compliance Read More »
In our previous blogs we discussed cybersecurity assessments and control implementation. Now it’s time to address step three in our Assess – Implement – Manage (AIM) methodology. This phase involves continuously collecting, reviewing, and preserving evidence of your ongoing compliance,
Beyond Implementation: How to Manage and Maintain CMMC Compliance Read More »
