Phase II certification is paused. DFARS 252.204-7012, 7019, and 7020 are not. Self-assessments, SPRS scores, and 72-hour incident reporting remain contractually binding, and with no assessor in the room, the accuracy of your score matters more, not less.
CMMC Level 1 and Level 2 don’t follow the same logic, and treating them as steps on the same ladder is where scoping goes wrong. This guide breaks down what triggers each level, how the assessments differ, and the decisions defense contractors need to make before either one gets scheduled.
Learn how defense contractors can perform secure tenant-to-tenant migrations while protecting CUI and meeting DFARS and CMMC requirements.
Strong documentation is critical to CMMC success. Learn the key evidence assessors expect and how to avoid common documentation failures.
Preparing for a Microsoft 365 GCC High migration? Explore the technical, compliance, and operational steps required for a smooth transition to GCC High.
Learn the essential steps to plan and execute a successful Microsoft 365 GCC High migration—ensuring compliance, security, and operational continuity.
Discover how to defend accounting and procurement teams from email compromise in the Defense Industrial Base. Learn CMMC-aligned best practices using Microsoft 365.
Understand the difference between technical and process controls in CMMC compliance. Learn how both work together to protect FCI and CUI data effectively.
CMMC 2.0 simplifies cybersecurity requirements for DoD contractors. Explore an overview of its levels, key changes from CMMC 1.0, and what each level means for compliance.
Looking for a new MSP? Stay ahead with the top questions to ask—from security and scalability to pricing and offboarding. Vet your provider with confidence.
