Can You Use Commercial Microsoft 365 for CMMC?
Commercial Microsoft 365 falls short of CMMC requirements for protecting CUI. Here’s how to tell whether GCC or GCC High is the right fit for your contract.
What Are FCI and CUI, and Which CMMC Level Do You Need?
FCI and CUI carry very different obligations. Which one your company handles decides your CMMC level and how much compliance work you’re signing up for.
What a Microsoft 365 GCC Migration Involves
A GCC migration means building a new Microsoft 365 environment from scratch and moving your business into it. Here's what the process involves and what tends to catch people off guard.
CMMC Phase 2 Suspended: What Changed and What Didn’t
The Department of War suspended the CMMC third party assessment requirement in July 2026, and self assessment and DFARS obligations remain in force. Here is what changed and what contractors still need to do.
How to Get CMMC Compliant and Stay Compliant: A 6-Phase Process
CMMC compliance comes down to five phases that take you from your first gap assessment to a third party audit. A sixth phase of ongoing maintenance keeps you compliant once you get there.
What Boeing’s CMMC Requirement Means for Subcontractors
Boeing has been messaging its supply chain about CMMC readiness, on a schedule separate from the government’s. Here’s what that means in practice.
