Azure Bastion Checklist for CMMC Level 2
Admin access is where solid Azure security often breaks down. One public RDP port, one shared admin account, or one weak exception can undo months of hardening. If you handle…
CMMC Azure Landing Zone Checklist for Small Contractors
A messy Azure tenant can turn a CMMC review into a scavenger hunt. Small contractors rarely have extra staff, spare budget, or time to clean up cloud decisions after the…
CMMC Tenant Restrictions v2 for Level 2 Admin Workstations
One bad sign-in can punch a hole through an otherwise well-managed admin workstation. In a CMMC Level 2 environment, that matters because privileged devices sit close to your identity plane,…
CMMC Level 2 Wireless Security Checklist for Small Contractors
If Wi-Fi can reach Controlled Unclassified Information, it can widen your CMMC exposure fast. I see small contractors miss this because wireless feels informal, while the assessor sees it as…
CMMC Level 2 Guide to Entra PIM for Groups
Standing admin access is the habit I find most often in CMMC gap reviews. It feels convenient, but it creates a wide attack path and weak evidence for assessors. When…
How I Design CMMC Intune RBAC for Small Teams
Too many small defense contractors fail CMMC prep before an assessor ever looks at a control. They over-grant admin rights, blur ownership, and hope good people won’t make bad changes.…
CMMC Level 2 Session Lock and Idle Timeout in Intune
An unlocked screen is one of the easiest audit failures to spot. If I’m mapping a CMMC session lock policy in Intune, I need more than a vague timeout setting.…
How I Set Up Intune Endpoint Privilege Management for CMMC Level 2
A laptop with standing local admin rights can undo months of CMMC prep in one bad install. When I deploy Intune endpoint privilege management for a Level 2 environment, I…
CMMC Level 2 Intune: Using Shared PC Mode the Right Way
A shared workstation can help your team, or it can wreck your audit trail. In a CMMC Level 2 Intune deployment, that difference usually comes down to identity, cleanup, and…
CMMC Level 2 DNS Filtering Checklist for Endpoints and Phones
One missed DNS setting can hand a phishing site a straight path to a managed device. For CMMC DNS filtering, I treat it as a practical control that lowers exposure…