Mark Dennis

Strong supporting documentation is what separates a passing CMMC assessment from a failed one. Assessors do not award credit for controls they cannot verify on paper. This Cyber Thursday session walks contractors through the documentation that underpins a CMMC Level 2 assessment, including the System Security Plan (SSP), policies and procedures, the Plan of Action […]

Not every Defense contractor handling federal information needs CMMC Level 2—and not every contractor who believes they are exempt actually is. This Cyber Thursday session helps Defense contractors determine their real CMMC compliance responsibilities by walking through the questions that define scope: what type of information flows through a contract (FCI vs. CUI), which cybersecurity […]