Security practitioner behind CMMC Operator. Supported a successful CMMC Level 2 assessment in 2024. Writes Mac-first CMMC guidance from the contractor side of the table.
CMMC Operator content is educational and practical implementation guidance. It is not legal advice, assessment advice, or a substitute for qualified counsel, a C3PAO, or your contracting requirements.
06
Jul
FIPS-Validated Encryption for CUI: Why Enabled Is Not Enough
4 min read
01
Jul
Vetting an MSP or ESP for CMMC: Questions to Ask Before You Sign
2 min read
29
Jun
MFA for CMMC: How to Actually Satisfy IA.L2-3.5.3
4 min read
27
Jun
Why Blocking AI Is the Wrong CMMC Strategy (And What to Do Instead)
2 min read
27
Jun
What a Mac SSP Narrative Needs for CMMC: macOS, mSCP, and Apple Guidance