INSIGHTS · CYBERSECURITY & CMMC
Practical perspectives.
Better-informed decisions.
Analysis on cybersecurity, CMMC, assessments and the challenges organizations face putting requirements into practice.
Latest insights
-
Zero Trust in Manufacturing: What CMMC Assessors Should Understand About OT
Explore how Zero Trust principles intersect with manufacturing OT, CMMC assessment scope, and operational realities assessors should understand.
-
What Would an Independent AI Security Assessment Actually Test?
AI security assessments should go beyond reviewing policies. Here is what independent testing could examine across authorization boundaries, tool permissions, monitoring, activity records, and escalation mechanisms.
-
NIST SP 1352: What the New 800-171A Rev. 3 Small Business Primer Means for CMMC Contractors
NIST has published SP 1352, a new small business primer for SP 800-171A Rev. 3. Here is what CMMC contractors should understand about the new assessment resource and the important distinction between NIST Rev. 3 guidance and current CMMC requirements.
-
CMMC Assessment Readiness: What “Ready” Actually Looks Like
A CMMC assessment is not simply a review of policies, screenshots, and compliance documents. Organizations preparing for an assessment need to be able to demonstrate that their cybersecurity requirements are implemented in the environment, understood by the people responsible for them, and supported by evidence that reflects how the organization actually operates. That distinction is…
-
“Historical” Is Not “Revoked”: Understanding the FIPS 140-2 Transition
FIPS 140-2 certificates have moved to the CMVP Historical list, but Historical does not mean Revoked. Here’s what those statuses actually mean and why the distinction matters.
-
FIPS 140-2 Deprecation Is Here: What the September 2026 Transition Means for CMMC Environments
FIPS 140-2 validated modules move to the CMVP Historical list in September 2026. Here’s what the transition means for CMMC environments and how organizations should prepare for FIPS 140-3.
Have a challenge behind the reading?
Let’s discuss how these topics connect to your organization, training or assessment needs.
Talk With Matt