CMMC POA&M Explained: What You Can Include Under 48

Understand what you can include in a CMMC POA&M under the latest 48 CFR rule. Learn which Level 2 controls are eligible, what “88 points” really means, and how to stay compliant with DoD (now DoW- Department of War) cybersecurity requirements. A POA&M in CMMC stands for “Plan of Actions and Milestones.” It is a […]

Understanding the New ITAR Registration Payment Requirements for 2025

ITAR registration fees 2025, DDTC compliance, ITAR payment process, CMMC readiness, DECCS registration, ITAR renewal, defense trade controls, Tier 1 Tier 2 Tier 3 ITAR fees Background: ITAR Registration and Annual Fees Under ITAR §§ 122.3(a) and 129.8(b)(1), every manufacturer, exporter, or broker involved with defense articles or services must register annually with the Directorate […]

How Many CMMC Domains Are There? 

Graphic that reads "What Are CMMC Domains?"

“Domain” is a term you come across often when researching the Cybersecurity Maturity Model Certification (CMMC). But what are CMMC domains, exactly? In today’s post, we tell you everything you need to know about this crucial component of the CMMC ecosystem.   A Definition of CMMC Domains Cybersecurity Maturity Model Certification (CMMC) domains are groups or […]

CMMC Level 1 vs CMMC Level 2: What Is the Difference? 

Graphic that reads "CMMC Level 1 vs CMMC Level 2: What Is the Difference? "

As you set your Cybersecurity Maturity Model Certification goals, it is important to have a solid grasp of the different compliance tiers available. For example, what is the difference between CMMC Level 1 and CMMC Level 2? In today’s blog post, we take a closer look.  About CMMC The acronym CMMC stands for Cybersecurity Maturity […]

CMMC Practice AC.L1-3.1.1: What You Need To Know 

Graphic that reads "CMMC Practice AC.L1-3.1.1"

Regardless of the Cybersecurity Maturity Model Certification (CMMC) level you need to achieve, there are some practices you need to observe. One of these practices is AC.L1-3.1.1, Authorized Access Control. Keep reading to learn more.  What Is AC.L1-3.1.1? Let’s start by making sense of the different components of the CMMC practice number:  AC indicates that […]

CMMC: What Is a POA&M? 

Graphic that reads "CMMC: What Is a POA&M? "

[vc_row][vc_column][vc_column_text]Anyone looking to comply with the Cybersecurity Maturity Model Certification (CMMC) needs to be aware of POA&Ms. Keep reading to learn what a POA&M is, why they matter, and how to use them within your compliance strategy.  A Basic Definition of POA&M The term POA&M stands for Plan of Actions and Milestones.  As the name […]

How Many CMMC Controls Are There? 

Graphic that reads "How Many CMMC Controls Are There? "

If you are looking into the process of becoming CMMC compliant, you are probably wondering how many CMMC controls you need to comply with. Keep reading to discover the answer and learn more about CMMC.  CMMC: The Basics The Cybersecurity Maturity Model Certification is a cybersecurity framework designed by the Department of Defense (DoD) to […]

CMMC: What Is a System Security Plan (SSP)? 

Graphic that reads "CMMC: What Is a System Security Plan (SSP)? "

Creating a System Security Plan (SSP) is an essential step toward achieving CMMC compliance. That’s why in today’s post, we provide a detailed overview of SSPs, from a basic definition to what an SSP template looks like.  System Security Plan (SSP): A Basic Definition A System Security Plan (or SSP) is a formal document that […]

CMMC Level 2 Compliance Checklist (With Printable File) 

Graphic that reads "CMMC Level 2 Compliance Checklist"

[vc_row][vc_column][vc_column_text]When aiming to achieve CMMC Level 2 compliance, it can be difficult to keep track of all the practices you must observe as a defense contractor. With that in mind, today we bring you a straightforward introduction to CMMC Level 2 compliance, plus a handy checklist you can use to understand where you stand and […]