CMMC Archives

Microsoft GCC High: Disadvantages Driving Defense Contractors Toward Smarter Advantages

by Bob Ertl December 17, 2025December 23, 2025 | Cybersecurity Risk Management

If you're a defense contractor staring down CMMC 2.0 deadlines, you've probably had the "GCC High conversation" at least a dozen times by now. Your IT team brings it up....

How AES-256 Encryption Supports CMMC Compliance

by Danielle Barbour November 24, 2025December 23, 2025 | CMMC Compliance

Defense contractors pursuing Cybersecurity Maturity Model Certification (CMMC) 2.0 face a fundamental requirement: protect controlled unclassified information (CUI) with encryption that meets federal cryptographic standards. AES-256 encryption satisfies this requirement...

“FedRAMP Equivalent” Is Not FedRAMP

Briefs

How BOD 26-04 Converts A Marketing Claim Into An Operational Liability — And What Verified Authorization Actually Proves.

Trusted Data Format for Secure Data Sharing Compliance

by Bob Ertl November 19, 2025December 23, 2025 | Regulatory Compliance

Regulatory fines have increased tenfold over the past five years. Yet despite these escalating costs, most organizations continue relying on file sharing methods that surrender control the moment data leaves...

From ToolShell to End-of-Support: Your SharePoint Migration Timeline Starts Now

by Patrick Spencer November 17, 2025December 23, 2025 | Secure File Sharing

The ToolShell exploit chain represents more than another security vulnerability requiring patches. It marks a fundamental shift in how nation-state actors target on-premises collaboration infrastructure, with Chinese threat groups Linen...

The 2025 Zero‑Trust File Exchange Playbook for CMMC Certification

by Danielle Barbour November 10, 2025December 23, 2025 | CMMC Compliance

Organizations seeking Department of Defense contracts face an increasingly complex cybersecurity landscape. The Cybersecurity Maturity Model Certification (CMMC) requirements, combined with zero-trust security principles, create a comprehensive framework for protecting...

How Kiteworks MCP Enables Secure AI Integration Without Exposing Confidential Data

by Tim Freestone November 7, 2025December 23, 2025 | Cybersecurity Risk Management

As AI adoption accelerates across regulated industries, enterprise organizations face a critical security challenge: enabling employees to leverage Large Language Models without exposing confidential information to unauthorized access controls, data...

Key Insights from ISACA’s 2026 Tech Trends Report for Government Risk Management

by Patrick Spencer October 23, 2025December 23, 2025 | Cybersecurity Risk Management

The landscape of government cybersecurity has reached a critical inflection point. According to ISACA’s 2026 Tech Trends and Priorities Pulse Poll, which surveyed 2,963 digital trust professionals across cybersecurity, IT...

CMMC-Compliant Secure File Sharing: How to Protect CUI Effectively

by Danielle Barbour October 21, 2025December 23, 2025 | CMMC Compliance

Defense contractors handling Controlled Unclassified Information (CUI) are required to comply with Cybersecurity Maturity Model Certification (CMMC). Compliance is critical: failure to meet CMMC requirements can lead to lost contracts,...

Redspin, Kiteworks, Cyturus and Carahsoft Partner to Launch “CMMC Compliance 360”

Press Releases

Integrated Solution Enables DoW Contractors to Accelerate Readiness, Streamline Certification and Sustain Compliance as CMMC Enforcement Approaches

Redspin, Kiteworks, Cyturus and Carahsoft Partner to Launch “CMMC Compliance 360”

October 7, 2025October 9, 2025

Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, today announced a new alliance with Redspin, Kiteworks and Cyturus to launch CMMC Compliance 360, an innovative solution designed to help...

CMMC Level 1 Documentation Requirements for Manufacturing Companies

by Danielle Barbour September 25, 2025December 23, 2025 | CMMC Compliance

When a manufacturer receives its first Department of Defense (DoD) subcontract, they quickly discover that winning the contract is only half the battle. The real challenge emerges when they had...

Silk Typhoon: The Hidden Threat to Supply Chain Data Security

by Patrick Spencer September 25, 2025December 23, 2025 | Cybersecurity Risk Management

The cybersecurity landscape has undergone a seismic shift. No longer do sophisticated threat actors focus solely on breaching network perimeters or exploiting individual vulnerabilities. Instead, they’ve discovered a far more...

CMMC Level 2 Documentation Requirements

by Danielle Barbour September 24, 2025January 19, 2026 | CMMC Compliance

Manufacturing companies handling Controlled Unclassified Information (CUI) face unprecedented documentation requirements under CMMC Level 2. Recent cybersecurity incidents in the defense manufacturing sector have highlighted the critical importance of comprehensive...

CMMC Level 3 Documentation Requirements

by Danielle Barbour September 24, 2025January 20, 2026 | CMMC Compliance

Advanced persistent threats and nation-state actors continue to target defense manufacturing companies handling the most sensitive information and supporting programs with national security implications. Recent sophisticated attacks against defense manufacturing...

Get started.