CMMC Level 2 Break Glass Accounts Setup in Microsoft Entra ID
If you’re pursuing CMMC Level 2, getting locked out of Entra ID during a security change is the kind of “one bad click” story you don’t want to tell an…
CMMC Level 2 Break-Glass Accounts for Microsoft 365, a 2-account setup, storage rules, and evidence to capture
If you’ve ever locked yourself out of a Microsoft 365 tenant, you already understand the problem. When Conditional Access, MFA, or identity providers misbehave, you need a way back in.…
CMMC Level 2 Incident Response Runbook For Microsoft 365
When an alert hits your Microsoft 365 tenant, you don’t need a “plan.” You need a CMMC incident response runbook you can follow under stress. I built the runbook below…
CMMC Level 2 Asset Inventory for Small Contractors (template, what counts as an asset, and how to keep it current)
If you’re a small DoD contractor, your CMMC asset inventory can feel like one more spreadsheet to babysit. But for Level 2, it’s not “nice to have.” It’s a basic…
CMMC Level 2 Incident Response Plan Template for Small Contractors (Microsoft 365 + endpoints, with a 30-day test schedule)
If you handle CUI, an incident isn’t just “an IT problem.” It’s a contract risk, a trust risk, and a timeline risk. The good news is a CMMC incident response…
CMMC Level 2 Entra PIM Setup For Admin Roles 2026 Guide
Standing admin access is like leaving the master keys on the front counter. Most days nothing happens. Then one bad password reset, one phish, or one stolen session cookie turns…
CMMC Level 2 Entra ID PIM Setup Guide With Audit Evidence Screenshots
If you support a DoD supplier, you already know the hardest part of compliance isn’t buying tools. It’s proving you used them the right way, every time. For CMMC Level…
CMMC Level 2 Evidence Binder in SharePoint, a folder structure, naming rules, and a weekly evidence habit that works
If your CMMC Level 2 plan lives in people’s heads, your audit will feel like a fire drill. I’ve watched small and mid-sized defense contractors spend weeks hunting for screenshots,…
Microsoft Teams for CUI in CMMC Level 2, a step-by-step hardening checklist (guest access, file sharing, meeting chat, recordings)
Microsoft Teams can feel like a conference room, a file cabinet, and a phone system all in one. That’s great for speed, but it’s also how Controlled Unclassified Information (CUI)…
CMMC Level 2 User Provisioning And Deprovisioning Checklist In Entra ID
How many “temporary” accounts are still active in your tenant right now? If you handle CUI, that question isn’t academic. Under CMMC user provisioning expectations, every account needs a clear…