Blog

When it comes to recent CMMC discussions, it feels as though the trees are being missed due to the forest being in the way. Specifically, quite a few discussions on "necessary evidence" needed to sati …

read more

This article covers the concept of building a RACI/RASCI matrix to demystify control ownership concerns, as well as reviewing any Customer Responsibility Matrix (CRM) that vendors may share with you.W …

read more

What is the soft underbelly of your CMMC program?For a lot of companies, it is not what they think it is and the reason is primarily based on misplaced assumptions. Too many people and companies view …

read more

This article looks at the most terrifying words in CMMC: "I’m from a RPO and I'm here to help!" This article focuses on a growing concern about Organizations Seeking Certification (OSC) being fleeced …

read more

This is an often-argued topic within CMMC discussions, so pour a cup of coffee and enjoy! Spoiler: Scoping does not mean all controls apply everywhere!One of the biggest misconceptions with scoping is …

read more

This article delves into the benefits and drawbacks associated with hiring a Registered Practitioner (RP) / Registered Provider Organization (RPO), as well as questions that you can ask to interview a …

read more