Posts about CMMC
What Will a C3PAO Want from My Team?
Before your Level 2 assessment, the MNS Group and all C3PAOs follow the standard and required process from ...
How Do I Choose a C3PAO?
Choosing the right C3PAO is one of the most important decisions you’ll make on your path to CMMC Level 2. And ...
Webinar | Meet the Assessors: Take a VIP Insider Tour of a CMMC Assessment
Whether you’re early in your CMMC journey or approaching assessment readiness, this is your chance to hear ...
Introducing [BUILT]℠ SecureCMMC Enclave, Engineered for A/E/C
If you’re in Architecture, Engineering, or Construction (A/E/C), you navigate a lot of tension: deliver ...
Northrop Grumman Signals a New Era of Cyber Requirements
Over the last few months, a pattern has emerged across the Defense Industrial Base (DIB): major primes and ...
Control 3.1.20: Verifying and Controlling Connections to External Systems Trust Is Earned, Not Assumed
“Verify and control/limit connections to and use of external systems.” — NIST SP 800-171 Rev. 2, 3.1.20 If ...
Control 3.12.1 — Periodic Assessment of Security Controls
“Periodically assess the security controls in organizational systems to determine if the controls are ...
Control 3.1.2 – Limiting Access to Authorized Functions: Why “Everyone’s an Admin” Breaks Compliance
“Limit information system access to the types of transactions and functions that authorized users are ...
Control 3.1.1 — Identifying Authorized Users (It’s Not Entra ID)
One of the simplest requirements in CMMC is also one of the most misunderstood. Control 3.1.1 says: ...