· CMMC
Joint Surveillance Voluntary Assessments and the Path to CMMC
The Joint Surveillance Program pairs DIBCAC with a C3PAO for a high‑rigor NIST SP 800‑171 assessment that can position a contractor for CMMC Level 2 once program conditions fit.
Insights
Practical guidance on CMMC, GCC High, and Microsoft 365 compliance for DIB leadership.
Conditional Access Policy Design for DFARS 252.204-7012
Conditional Access policy design in Entra ID for DFARS 252.204-7012 compliance.
SPRS Scoring: Calculating and Improving Your NIST 800-171 Posture
How SPRS scoring works under DFARS 7019/7020. The scoring methodology, common deductions, posting cadence, and what CMMC changes about it.
Migrating to Microsoft GCC High: A Practical Decision Framework
For DIB contractors handling CUI, the cloud decision is GCC or GCC High, not commercial. Choosing right the first time avoids a costly second migration.
Intune Compliance Baselines for Protecting CUI on Managed Devices
Designing Intune compliance baselines for endpoints that touch CUI.
Microsoft Purview for CUI Data Classification and DLP
How to design Microsoft Purview sensitivity labels and DLP policies for CUI handling.