CMMC Level 2 LAPS Setup Using Intune And Entra ID
What happens when one shared local admin password lives on every Windows device? One stolen credential can act like a master key. That’s why I treat CMMC Level 2 LAPS…
CMMC Level 2 CUI Data Flow Diagram Template for Microsoft 365
If a CUI flow diagram feels fuzzy, the whole compliance story feels fuzzy. In Microsoft 365, I want a diagram that shows where Controlled Unclassified Information enters, where it moves,…
CMMC Level 2 Password and Lockout Policy in Microsoft 365, exact settings, common fails, and evidence screenshots
Passwords are still the front door key for most Microsoft 365 tenants. In a CMMC Level 2 assessment, that key has to be strong, monitored, and backed by proof. I…
CMMC Level 2 Remote Access Controls Using Entra ID and VPN: A Practical Guide
Remote access is where good security programs get messy. One “temporary” exception turns into a permanent hole, then an assessor asks you to prove you monitor and control every session.…
CMMC Level 2 Policy Pack for Small Contractors (14 policies, plain-language templates that match NIST 800-171)
If you’re a small contractor, you don’t lose bids because you can’t do the work. You lose them because you can’t prove you protect CUI. That’s why CMMC Level 2…
CMMC Level 2 System Boundary Diagram Template (Microsoft 365, endpoints, and any on-prem), with an example you can copy
If you’re preparing for CMMC Level 2, your CMMC system boundary diagram is one of the fastest ways to show assessors you control where CUI lives, how it moves, and…
CMMC Level 2 Break Glass Accounts Setup in Microsoft Entra ID
If you’re pursuing CMMC Level 2, getting locked out of Entra ID during a security change is the kind of “one bad click” story you don’t want to tell an…
CMMC Level 2 Break-Glass Accounts for Microsoft 365, a 2-account setup, storage rules, and evidence to capture
If you’ve ever locked yourself out of a Microsoft 365 tenant, you already understand the problem. When Conditional Access, MFA, or identity providers misbehave, you need a way back in.…
CMMC Level 2 Asset Inventory Template Using Intune and Entra ID Implementation Guide
If you’re aiming for CMMC Level 2, your CMMC asset inventory can’t live in someone’s head or a stale spreadsheet. Assessors want proof that you know what’s in scope, who…
CMMC Level 2 Incident Response Runbook For Microsoft 365
When an alert hits your Microsoft 365 tenant, you don’t need a “plan.” You need a CMMC incident response runbook you can follow under stress. I built the runbook below…