Latest
What 32 CFR Part 170, DFARS 252.204-7019, and NIST SP 800-171A require on CMMC evidence freshness, plus a refresh schedule by evidence type.
Read the articleThe July 13 pause removed third-party assessments as a condition of award, not the underlying rules. In September, DOJ collected $2,042,518 from a contractor over 800-171 gaps. Here is what still applies and what to do now.
Manual screenshots versus automated collection for CMMC evidence, compared honestly. Our position: past a tiny scope, automated collection from the live tenant is the sane path, and PolicyCortex is built for exactly that on Azure.
What assessors accept as proof for each of the 110 CMMC Level 2 practices.