As the CMMC Churns

CMMC Metrics for the C-Suite
Gallery
CMMC Metrics for the C-Suite

CMMC Metrics for the C-Suite

By Matthew Titcombe|2025-07-02T16:01:35-04:00June 22nd, 2025|Categories: As the CMMC Churns|Tags: 32 cfr part 170, certification, cmmc, metrics, NIST SP 800-171 Rev 2, NIST SP 800-171A, powerpoint, template|

DIBCAC, FIPS, and Temporary Deficiencies
Gallery
DIBCAC, FIPS, and Temporary Deficiencies

DIBCAC, FIPS, and Temporary Deficiencies

Do you know how to document a FIPS-based [...]

By Matthew Titcombe|2025-05-13T16:58:52-04:00May 14th, 2025|Categories: As the CMMC Churns|Tags: 3.13.11, 32 cfr part 170, certification, cmmc, FIPS, NIST SP 800-171 Rev 2, NIST SP 800-171A, Temporary Deficiency|

External Service Provider (ESP) Compliance Business Risk Transfer
Gallery
External Service Provider (ESP) Compliance Business Risk Transfer

External Service Provider (ESP) Compliance Business Risk Transfer

Are you in the Defense Industrial Base? Do [...]

By Matthew Titcombe|2024-11-03T14:30:23-05:00November 3rd, 2024|Categories: As the CMMC Churns|Tags: 32 cfr part 170, assessment, certification, certification assessment, cmmc, esp, examination, external service provider, MSP, MSSP, NIST SP 800-171 Rev 2, NIST SP 800-171A|

The CMMC Program–It’s Here!!!
Gallery
The CMMC Program–It’s Here!!!

The CMMC Program–It’s Here!!!

It’s Here!!!! The CMMC Program is in white [...]

By Matthew Titcombe|2024-10-14T19:03:13-04:00October 14th, 2024|Categories: As the CMMC Churns|Tags: 32 cfr part 170, assessment, certification, certification assessment, cmmc, examination, NIST SP 800-171 Rev 2, NIST SP 800-171A|

3.3.3, Review and update logged events
Gallery
3.3.3, Review and update logged events

3.3.3, Review and update logged events

Did you know that NIST SP 800-171's 3.3.3, [...]

By Matthew Titcombe|2024-06-16T13:48:16-04:00June 16th, 2024|Categories: As the CMMC Churns, understanding the requirements|Tags: 3.3, 3.3.3, AU, audit and accountability, audit logs, audit records, cmmc, Events, NIST SP 800-171 Rev 2, NIST SP 800-171 Rev 3|

3.3.1, System Auditing
Gallery
3.3.1, System Auditing

3.3.1, System Auditing

Organization's struggle with documenting NIST SP 800-171's 3.3.1 [...]

By Matthew Titcombe|2024-06-11T10:07:13-04:00June 11th, 2024|Categories: As the CMMC Churns, understanding the requirements|Tags: 3.3, 3.3.1, AU, audit and accountability, audit logs, audit records, cmmc, Events, NIST SP 800-171 Rev 2, NIST SP 800-171 Rev 3|

3.1.22, Publicly Accessible Content
Gallery
3.1.22, Publicly Accessible Content

3.1.22, Publicly Accessible Content

Is your organization struggling with NIST SP 800-171's Security [...]

By Matthew Titcombe|2024-05-30T09:19:03-04:00May 30th, 2024|Categories: As the CMMC Churns, understanding the requirements|Tags: 3.1, 3.1.22, access control, cmmc, NIST SP 800-171 Rev 2, NIST SP 800-171 Rev 3, public content|

3.10.6 Alternate Work Sites
Gallery
3.10.6 Alternate Work Sites

3.10.6 Alternate Work Sites

Is your organization struggling to understand how to [...]

By Matthew Titcombe|2024-05-11T20:57:35-04:00April 19th, 2024|Categories: As the CMMC Churns, understanding the requirements|Tags: 3.10, 3.10.6, alternate site, cmmc, cybersecurity, NIST SP 800-171 Rev 2, NIST SP 800-171A, Physical Protection|

The Three Types of Evidentiary Objects
Gallery
The Three Types of Evidentiary Objects

The Three Types of Evidentiary Objects

Did you know there are three general types [...]

By Matthew Titcombe|2024-05-12T12:20:02-04:00April 8th, 2024|Categories: As the CMMC Churns|Tags: assessment, assessment objects, cmmc, examination, NIST SP 800-171 Rev 2, NIST SP 800-171A|

Your SSP Sucks, Seriously.
Gallery
Your SSP Sucks, Seriously.

Your SSP Sucks, Seriously.

Sorry to tell many of you, your NIST [...]

By Matthew Titcombe|2024-05-12T12:20:43-04:00March 28th, 2024|Categories: As the CMMC Churns|Tags: cmmc, NIST SP 800-171 Rev 2, SSP, system security plan|