CMMC Trigger Events: A Triage Guide for Contractors
Nobody reads a compliance article for entertainment. If you are here, one of the nine CMMC trigger events on this page landed on your desk this week. A questionnaire from…
Learn moreTrigger Events & Urgent Situations
CMMC Level 2 Certification an RFP Wants? Bid Anyway
An RFP you want to win says the offeror must hold CMMC Level 2 certification. You do not have it, and neither, at the moment, does anyone else who did…
Learn moreCUI in Commercial Microsoft 365: What to Do Now
Somebody worked out that you have CUI in commercial Microsoft 365, sitting alongside the payroll spreadsheets and the shop calendar. It is the most common finding in the small defense…
Learn moreCMMC Compliant MSP? How to Verify What Yours Claims
Being told you already have a CMMC compliant MSP is a comfortable thing to hear. You asked your IT provider where you stand and got a reassuring answer, something like…
Learn moreDFARS 7021 Clause Found After Award? Read This First
The award came through, somebody in contracts finally read the whole document, and a DFARS 7021 clause is sitting in section I. Now there is a question nobody wants to…
Learn more90 Days to CMMC Compliance: What Is Really Possible
You have 90 days to CMMC compliance, and that is enough time to become a defensible, documented, honestly scored supplier. It is not enough time to become a fully implemented…
Learn moreDropped Without CMMC? What a Prime Can Actually Do
Being dropped without CMMC is the threat sitting in your inbox. Somebody at your prime, usually in supply chain and usually by email, has told you that you will be…
Learn moreExpired SPRS Score and a Bid Due? Fix It This Week
An expired SPRS score is the most fixable emergency in this whole category, and it never announces itself in advance. A proposal is due Thursday, somebody finally opened the SPRS…
Learn moreCUI Marked Drawings You Were Not Expecting? Do This
CUI marked drawings arrive in a quote package with no warning at all. An engineer opens the file and there it is across the top of the sheet: CUI. Nobody…
Learn moreCybersecurity Questionnaire From Your Prime? Do This
How to answer a prime's cybersecurity questionnaire without creating liability: the five types, the three lookups first, and what not to send.
Learn more