CMMC Archives

The Blast Radius Problem: What Happens When an Ungoverned AI Agent Fails at Scale

by Tim Freestone March 25, 2026March 25, 2026 | Cybersecurity Risk Management

When a human employee makes a compliance mistake — accessing a record they shouldn’t, sending data to the wrong recipient, retaining information past its required disposal date — the blast...

ABAC vs. RBAC for AI Agent Access Control: Why Roles Aren’t Enough

by Tim Freestone March 25, 2026March 25, 2026 | Cybersecurity Risk Management

Most enterprise access control architectures are built around roles. A clinician has access to patient records. A cleared employee has access to CUI repositories. A financial adviser has access to...

An Alignment Researcher Could Not Stop Her Own AI Agent

by Kurt Michael March 23, 2026March 23, 2026 | Cybersecurity Risk Management

Summer Yue, Meta’s alignment director, recently shared details of an incident that should unsettle every enterprise deploying AI agents. Her AI agent—running on OpenClaw, the open-source framework formerly known as...

The Agent Is Already Inside the Building

by Tim Freestone March 20, 2026March 20, 2026 | Cybersecurity Risk Management

Here’s the scenario nobody planned for. A financial services firm deploys an AI agent to automate quarterly client reporting. The agent pulls market data. SEC filings. Portfolio performance. Then it...

CMMC 2.0 Levels Explained: Advanced and Expert Cybersecurity Guide

by Bob Ertl March 18, 2026 | CMMC Compliance

MMC 2.0 Level 2 (Advanced) Level 2 (Advanced) is the second level of the CMMC 2.0 framework. It is an intermediate level that requires companies to implement more specific practices...

A CISO Walks Into a Board Meeting With Only Half an Answer

by Danielle Barbour March 17, 2026March 17, 2026 | Regulatory Compliance

Consider a scenario that will play out in hundreds of enterprises over the coming months. A CISO walks into a board meeting and says, “Our OpenClaw strategy is NemoClaw. NVIDIA’s...

Jensen Huang Just Defined the Strategic Imperative—but Left the Hardest Part Unsolved

by Tim Freestone March 17, 2026March 17, 2026 | Cybersecurity Risk Management

On March 16, 2026, NVIDIA CEO Jensen Huang stood before a capacity crowd at the SAP Center in San Jose and issued what may become the defining technology mandate of...

Data Sovereignty in the Defense Industrial Base: What Contractors Need to Know

by Danielle Barbour March 4, 2026March 4, 2026 | CMMC Compliance

For most industries, data sovereignty compliance comes down to a geographic question: where is data allowed to live, and which government’s laws govern it? For defense contractors, that question is...

Your DSPM Told You Where Your CUI Lives. So Why Are You Still Failing CMMC?

by Danielle Barbour February 25, 2026February 25, 2026 | CMMC Compliance

Defense Industrial Base organizations are spending six and seven figures on Data Security Posture Management tools. And those tools are doing exactly what they promised: scanning file shares, cloud storage,...

2026 Compliance Checklist for Secure File Sharing and Audit Readiness

by Uri Kedem February 24, 2026February 24, 2026 | Secure File Sharing

Modern compliance audits don’t just ask whether sensitive files are protected—they require proof. In 2026, secure file sharing systems support compliance and auditing by centralizing exchanges across channels, enforcing encryption...

What to Look for When Selecting a CMMC‑Ready Security Vendor

by Danielle Barbour February 20, 2026February 20, 2026 | CMMC Compliance

Selecting the best CMMC compliance software solutions is less about picking a single product and more about assembling a secure, auditable operations model that withstands DoD scrutiny. The right vendors...

How to Overcome CMMC Compliance Bottlenecks with the Right Security Software

by Danielle Barbour February 11, 2026 | CMMC Compliance

Stalled CMMC efforts usually aren’t caused by a lack of intent—they’re caused by scattered tools, manual evidence wrangling, and unclear scoping. The fastest route around these bottlenecks is to standardize...

7 Proven Steps to Securely Share CUI Between Agencies and Contractors

by Bob Ertl February 9, 2026 | CMMC Compliance

CUI often moves across organizational boundaries, systems, and jurisdictions. Each handoff—an email with a drawing, a file transfer to a supplier, an upload to a government portal—creates risk if labels,...

Kiteworks vs Competitors: Which CMMC Security Platform Wins?

by Robert Dougherty February 9, 2026 | CMMC Compliance

Defense contractors and their IT partners face a simple reality: CMMC is now a gating factor for contract eligibility and cyber risk posture. The question isn’t whether to comply, but...

The Executive’s Guide to Choosing Affordable CMMC‑Compliant File Sharing Platforms

by Danielle Barbour February 9, 2026 | CMMC Compliance

Finding an affordable CMMC-compliant file sharing platform is less about chasing the lowest price and more about balancing control coverage, audit readiness, and operational fit. The right choice aligns with...

Get started.