Security practitioner behind CMMC Operator. Supported a successful CMMC Level 2 assessment in 2024. Writes Mac-first CMMC guidance from the contractor side of the table.
CMMC Operator content is educational and practical implementation guidance. It is not legal advice, assessment advice, or a substitute for qualified counsel, a C3PAO, or your contracting requirements.
09
Jul
GCC vs. GCC High vs. Commercial Microsoft 365: What CMMC Level 2 Actually Requires
4 min read
09
Jul
CUI vs. FCI: How to Tell Them Apart and Handle Each Correctly
4 min read
09
Jul
Writing a CMMC System Security Plan (SSP) That Survives Assessment
6 min read
06
Jul
FIPS-Validated Encryption for CUI: Why Enabled Is Not Enough
4 min read
01
Jul
Vetting an MSP or ESP for CMMC: Questions to Ask Before You Sign