-
CMMC Phase 2 is Paused, But Compliance Isn’t: Critical Next Steps
As many of you are aware, the Department of War (DoW) recently issued a memorandum suspending the transition to CMMC Phase 2 requirements, which were originally scheduled to take effect on November 10, 2026. The DoW CIO will initiate a 60-day review of the program under a newly established CMMC Reform Task Force. In times… Read More »
-
WHITEPAPER: Preparing for the Transition to NIST SP 800-171 Revision 3
Aligning CMMC Level 2, DFARS, and the Proposed FAR CUI Rule for Long-Term Federal Compliance By Asher Glasgow, KLC Consulting; LCCA Executive Summary Federal cybersecurity requirements are entering another period of significant change. As the federal government moves toward NIST Special Publication (SP) 800-171 Revision 3 (Rev. 3) as the long-term baseline for protecting Controlled… Read More »
-
The Paradox of “Brilliant at the Basics”
Why “Brilliant at the Basics” Isn’t Enough for DoW Compliance The Department of War (DoW) Chief Information Officer recently launched the “Brilliant at the Basics” campaign. Marketed as practical, streamlined guidance to empower small and mid-sized businesses (SMBs), the campaign promises to reduce administrative burden and eliminate “compliance overhead.” For Defense Industrial Base (DIB) suppliers… Read More »
-
When AI Misbehaves
Managing Generative Risks Before They Compromise Your Control Environment The rapid proliferation of autonomous AI systems across the Defense Industrial Base introduces an unprecedented landscape of systemic risk. For defense contractors handling Controlled Unclassified Information, these frontier tools demand deliberate oversight and rigorous technical custody. Our President and CISO, Kyle Lai, was recently featured in… Read More »
-
CMMC Assessment Bottleneck
For many defense contractors, the path to compliance feels like building an aircraft that’s already in flight. With the Department of Defense (DoD) rolling out a multi-phase implementation plan, the pressure on Organizations Seeking Certification (OSCs) to secure their position in the defense industrial base is facing a CMMC Assessment Bottleneck. Below are crucial insights… Read More »
-
What Happens After CMMC Level 2 Certification? The SPRS Annual Affirmation
Organizations that earn CMMC Level 2 certification must complete an annual affirmation in SPRS. This guide explains the responsibilities of the Affirming Official and the steps required to maintain compliance with the CMMC Program Rule. Just earned Level 2 Certification from a C3PAO? Congratulations! Here is your next move. Obtaining a CMMC Level 2 Certificate… Read More »
-
How to Choose the Right C3PAO for Your CMMC Assessment
Welcome to The Assessor’s Corner The Assessor’s Corner continues to provide unfiltered, practical insights from KLC Consulting’s Lead CMMC Certified Assessors (CCAs) on critical CMMC topics. This series is designed to equip Organizations Seeking Certification (OSCs) with the knowledge needed for a prepared, ready, and successful assessment outcome. Key Vetting Questions for DoD Contracts In… Read More »
-
CMMC EIT Methodology
Welcome to The Assessor’s Corner The Assessor’s Corner continues to provide unfiltered, practical insights from KLC Consulting’s Lead CMMC Certified Assessors (CCAs) on critical CMMC topics. This series is designed to equip Organizations Seeking Certification (OSCs) with the knowledge needed for a prepared, ready, and successful assessment outcome. For organizations in the Defense Industrial Base… Read More »
-
The AI Edge in CMMC Compliance
Welcome to The Assessor’s Corner We are proud to introduce The Assessor’s Corner, the first in a series of articles from KLC Consulting, a C3PAO. This series provides unfiltered, practical insights from our Lead CMMC Certified Assessors (CCAs) on critical CMMC topics. Our goal is to equip Organizations Seeking Certification (OSCs) with the knowledge needed… Read More »
Feeling Overwhelmed by CMMC?
Download our essential guide to gain a clear roadmap through every phase of a CMMC Assessment. From foundational preparation and scope definition to navigating the assessment day and understanding post-audit requirements. Don’t leave your CMMC Level 2 success to chance.
Don’t Let Your Security Posture Drift
The Phase II suspension changed the third-party assessment timeline, not the underlying obligation to protect CUI. Use this period to verify your scope, close known gaps, align documentation with implementation, and ensure your SPRS submission accurately reflects your environment.
