CMMC System Use Notification Setup for Level 2
A missing login banner can leave an otherwise well-secured CUI environment exposed during an assessment. This notice is a small control with a large compliance footprint because it must appear…
CMMC Level 2 Business Continuity Plan Template
A ransomware event, failed cloud tenant, or unavailable key employee can stop a small defense contractor faster than a missed deadline. A CMMC Level 2 business continuity plan gives your…
CMMC Firewall Rule Review: SOP and Evidence
A firewall rule that worked last year can become an unapproved path into your CUI environment today. In my experience, a thorough CMMC firewall rule review catches forgotten vendor access,…
CMMC Time Synchronization Evidence for Windows Networks
A clock that drifts by a few minutes can turn a clean audit trail into an assessor’s question. CMMC time synchronization requires more than showing that a server has an…
CMMC Level 2 Configuration Management Plan for Small Contractors
A configuration change that nobody recorded can become an assessment problem months later. For small DoD contractors in the defense industrial base handling Controlled Unclassified Information, a CMMC configuration management…
CUI in CAD Systems: A Practical CMMC Scoping Guide
A CAD file can carry Controlled Unclassified Information long after it leaves the engineering workstation. A drawing may sit in a PDM vault, move through Microsoft 365, appear in a…
CMMC RMM Hardening Checklist for Small Contractors
An exposed RMM tool can give an attacker a fast path to every endpoint you own. For a small contractor, that single gap can hurt operations, expose CUI, and create…
Credential Guard in Intune for CMMC Level 2
A stolen cached credential can turn one Windows 11 laptop into a pivot point. That’s why I treat Credential Guard as a serious hardening step when I build a CMMC-minded…
Azure Bastion Checklist for CMMC Level 2
Admin access is where solid Azure security often breaks down. One public RDP port, one shared admin account, or one weak exception can undo months of hardening. If you handle…
CMMC Azure Landing Zone Checklist for Small Contractors
A messy Azure tenant can turn a CMMC review into a scavenger hunt. Small contractors rarely have extra staff, spare budget, or time to clean up cloud decisions after the…