Security practitioner behind CMMC Operator. Supported a successful CMMC Level 2 assessment in 2024. Writes Mac-first CMMC guidance from the contractor side of the table.
CMMC Operator content is educational and practical implementation guidance. It is not legal advice, assessment advice, or a substitute for qualified counsel, a C3PAO, or your contracting requirements.
15
Aug
Incident Reporting Under DFARS 252.204-7012: The 72-Hour Clock
2 min read
15
Aug
POA&M in CMMC: What You Can Defer and What You Cannot
3 min read
15
Aug
Is It CUI? A Decision Path for Engineering Data
3 min read
15
Aug
Mac Tools and CMMC: Which Are ESPs, CSPs, or Neither?
4 min read
12
Aug
Do Macs and Windows Mean Two Management Planes for CMMC?
