CMMC Intune Autopilot Checklist for New Windows Devices
A new laptop can become a weak point in under an hour. If it ships with the wrong rights, missing encryption, or no audit trail, you’ve already lost ground. When…
A Practical CMMC Log Review SOP for Entra ID and Defender
A monthly review fails when it becomes a memory test. For CMMC Level 2, I want a repeatable routine that shows what I checked, what I found, and what I…
Purview Content Explorer for CMMC Level 2 CUI Discovery
You can’t protect CUI that you haven’t found. When I review Microsoft 365 for CMMC Level 2, the first gap is often simple, data sits in places nobody expected. Mailboxes,…
Implementing and Governing the CMMC Level 2 Admin Consent Workflow in Microsoft Entra ID
One bad app consent can undo months of hardening. In a Level 2 tenant, CMMC admin consent is less about convenience and more about change control. If you support defense…
CMMC GCC High Migration Plan for Microsoft 365 in 2026
The hard part of a CMMC GCC High migration isn’t buying licenses. It’s drawing the right boundary for CUI, then moving identity, devices, mail, files, and evidence without breaking daily…
CMMC Level 2 Defender for Endpoint Onboarding in Intune
A device can look healthy in Intune and still fail your CMMC story. If the Defender sensor never onboards, you lose threat telemetry, device risk, and clean audit evidence. When…
SharePoint Permission Audit Checklist for CMMC Level 2
One broken permission can expose an entire CUI library. When I review Microsoft 365 tenants for defense contractors, permissions are often where quiet risk hides. If you manage a CUI…
CMMC Level 2 Vendor Risk Management Template for Small Contractors
A weak vendor can undo months of CMMC prep. That’s why I treat CMMC vendor risk management like a control, not a paperwork task. If you’re a small contractor or…
CMMC Patch Management Plan for Windows and Third-Party Apps
Miss one browser update on a CUI workstation, and the rest of your security story starts to wobble. That’s why CMMC patch management can’t live as a vague “we patch…
CMMC Level 2 Browser Hardening Baseline for Edge and Chrome
A locked endpoint with an open browser isn’t locked at all. When I build a browser hardening baseline for CMMC Level 2, I treat Edge and Chrome as managed system…