Defender for Identity for CMMC Level 2 Hybrid Setups
One blind spot on a domain controller can wreck an otherwise strong CMMC story. When I deploy Defender for Identity in a hybrid defense environment, I treat it as an…
My Intune Tamper Protection Checklist for CMMC Level 2
A locked security setting can save an audit, and it can also stop a bad day from getting worse. In a CMMC Level 2 environment, I don’t treat Intune tamper…
CMMC Linux Baseline for Ubuntu and Defender
A Linux endpoint can look clean and still fail a CMMC review. I see that gap when teams install Ubuntu, add Defender, and assume the toolset is the baseline. For…
CMMC Level 2 Dormant Account Reviews in Entra ID
One forgotten account can undo months of security work. In Microsoft Entra ID, stale identities often keep old group memberships, app access, and sometimes admin rights long after a person…
Building a CMMC Level 2 macOS Intune Baseline for Small Contractors
One unmanaged Mac can punch a hole in a CUI boundary. I see that risk often in small contractors that added macOS for leaders, engineers, or field staff, then tried…
How I Prepare for a CMMC Level 2 Assessor as a Microsoft 365 Admin
A CMMC interview can expose the gap between what Microsoft 365 can do and what my tenant actually does. That gap is where many admins get into trouble. When I…
CMMC Inheritance Matrix Template for Level 2
If my evidence is scattered, a Level 2 assessment slows down fast. A strong CMMC inheritance matrix fixes that before an assessor starts asking who owns each control. By April…
CMMC Level 2 Mailbox Auditing in Exchange Online
A mailbox can hold contracts, drawings, pricing, and CUI. If I can’t prove who accessed it, who changed it, and when it happened, I have a gap in my control…
WDAC and Intune for CMMC Level 2 Application Control
A WDAC Intune rollout can lock down CUI endpoints, or block payroll at 8 a.m. The difference is rarely the tool. It is the policy design, the pilot ring, and…
CMMC Level 2 Vulnerability Exceptions With POA&M Examples
CMMC Level 2 Vulnerability Exceptions With POA&M Examples A vulnerability exception can keep operations moving, but it can also weaken a CMMC story fast. As of April 2026, Level 2…