CMMC Access Packages in Entra ID for Level 2 Readiness
Access control usually breaks in ordinary moments, new hires, rushed admin requests, outside contractors, and projects that never get cleaned up. When I review CMMC Level 2 gaps, those are…
Entra Connect Hardening Checklist for CMMC Level 2
One weak sync server can open a path through an otherwise solid CMMC Level 2 program. When I review hybrid identity in regulated environments, I treat Microsoft Entra Connect as…
Intune Device Cleanup Policy for Stale Endpoints in CMMC Level 2
When I review a Microsoft 365 tenant before a CMMC readiness effort, stale devices jump out fast. They fill reports with ghosts, blur asset counts, and make old access paths…
A Practical Windows Server Hardening Checklist for CMMC Level 2
When I review a small contractor’s Windows Server, I usually find the same issue: the server is trusted far more than it should be. If that system stores or supports…
Entra ID Privileged Group Review SOP for CMMC Level 2
Stale admin access is one of the fastest ways to fail a CMMC credibility check. If I can’t show who has privileged access in Microsoft Entra ID, why they still…
Entra ID Temporary Access Pass Setup for CMMC Level 2
A weak onboarding process can undo a strong security stack in one afternoon. That is why I treat Entra ID temporary access pass setup as a controlled identity process, not…
How I Use Entra ID Device Filters for CMMC Level 2
One weak laptop can open a path to Controlled Unclassified Information, even when the rest of Microsoft 365 looks locked down. I see that often when teams turn on Conditional…
Defender for Identity for CMMC Level 2 Hybrid Setups
One blind spot on a domain controller can wreck an otherwise strong CMMC story. When I deploy Defender for Identity in a hybrid defense environment, I treat it as an…
My Intune Tamper Protection Checklist for CMMC Level 2
A locked security setting can save an audit, and it can also stop a bad day from getting worse. In a CMMC Level 2 environment, I don’t treat Intune tamper…
CMMC Linux Baseline for Ubuntu and Defender
A Linux endpoint can look clean and still fail a CMMC review. I see that gap when teams install Ubuntu, add Defender, and assume the toolset is the baseline. For…