CMMC

NOTE: Read the footer of the website as a reminder that is information is for educational use and it is "use at your own risk" content.

CMMC Compliance Education Material

The CMMC-COA has guest writers who contribute their thoughts on CMMC compliance-related matters.

Understanding The Risk Management Ecosystem

When it comes to recent CMMC discussions, it feels as though the trees are being missed due to the forest being in the way. Specifically,...

CMMC Control Ownership Documentation (RACI/RASCI)

This article covers the concept of building a RACI/RASCI matrix to demystify control ownership concerns, as well as reviewing any...

Is Your MSP / MSSP A Dumpster Fire?

What is the soft underbelly of your CMMC program? For a lot of companies, it is not what they think it is and the reason is primarily...

The most terrifying words in CMMC: "I’m from a RPO and I'm here to help."

This article looks at the most terrifying words in CMMC: "I’m from a RPO and I'm here to help!" This article focuses on a growing concern...

Is control scoping the same as control applicability?

This is an often-argued topic within CMMC discussions, so pour a cup of coffee and enjoy! Spoiler: Scoping does not mean all controls...

Is your RP/RPO a “good idea fairy” or a project manager?

This article delves into the benefits and drawbacks associated with hiring a Registered Practitioner (RP) / Registered Provider...