NIST 800-171
4 posts.
Aerospace Suppliers Are Governed by Two Rule Sets That Do Not Agree
A NIST 800-171 environment can be fully compliant and still be an ITAR violation, because the two regimes ask different questions about the same data. Add national security space requirements and you have three overlapping rule sets on one server room.
CMMC Phase 2 Is Suspended. Your Legal Exposure Went Up.
The certification deadline is gone. The obligations are not, and the one government mechanism that used to catch a bad SPRS score before a lawyer did is paused. Here is what defense contractors should actually be working on.
Florida Makers and CMMC: The OT Blind Spot on Your Shop Floor
Your CNC machines, PLCs, and IoT sensors are in scope. The question of whether g-code from a CUI drawing is itself CUI is one of the most contested questions in the CMMC manufacturing world. Here is the defense plan that holds regardless of which reading your assessor brought with them.
CMMC Level 2 for Small Businesses: What Actually Changed
The final rule is live. Here is what small defense contractors need to know about scoping, POA&M timelines, and what assessors are actually looking for.