CMMC for Manufacturers: A Space Coast Shop Floor Guide
The Space Coast is a defense supply chain that a lot of people drive past without noticing. L3Harris has its headquarters in Melbourne. Northrop...
Category
Category: CMMC & Compliance
CMMC compliance guidance for small defense contractors, covering assessments, SPRS scores, and DFARS requirements in plain English
CUI vs FCI: Telling Them Apart in Your Own Contracts
The definitions are not hard. FCI is non-public information provided by or generated for the Government under a contract. CUI is information that a...
DFARS 252.204-7012 in Plain English
Most of the anxiety in the defense industrial base right now is aimed at CMMC. That is the wrong target. CMMC is an assessment...
Level 1 vs Level 2: Which Actually Applies to You
The question I get most often from shops under fifty people is some version of "we're only Level 1, right?" It is almost always...
Writing an SSP That Survives Scrutiny
Every assessment I have watched go badly went badly in the first hour, and it went badly for the same reason: the assessor could...
Can You Use AI Tools If You Handle CUI?
I get this question more than any other right now, and it usually arrives in a slightly panicked tone: "We handle CUI. Are we...
POA&M: What Belongs on It and What Doesn’t
The plan of action and milestones is the most misunderstood document in CMMC, and the misunderstanding runs in a specific direction. People treat the...
SPRS Scoring Explained: How the Number Is Calculated and What It Signals to Primes
A prime asks for your SPRS score. You look it up, read back a number, and hope that is the end of it. It...
CUI Scoping: The Decision That Determines Your Entire CMMC Budget
Most CMMC conversations start in the wrong place. They start with controls. MFA, logging, encryption, the 110 requirements in NIST SP 800-171. Those matter,...
How Much Does CMMC Compliance Actually Cost?
Every consultant answers this with "it depends." That is true and useless. So let me give you the actual numbers — the Department's own...