-
8 Burning Questions About 48 CFR
The landscape for DoD contractors has fundamentally shifted. The long-awaited CMMC Final Rule 48 CFR is no longer a proposal; it goes into effect on November 10, 2025. Therefore, understanding its specific CMMC requirements is a necessity for continued eligibility in the defense industrial base (DIB). This post distills pressing questions and answers from KLC… Read More »
-
CMMC is Here: DoD’s Final Push Makes It Real for Oct 2025
New Directive from Secretary of Defense As a valuable contributor to the Defense Industrial Base (DIB), you know cybersecurity is a critical component of our national security. Recent actions and announcements from the Department of Defense (DoD) underscore this reality with vigorous urgency, particularly concerning the Cybersecurity Maturity Model Certification (CMMC). A new directive from… Read More »
-
Journey to Achieve CMMC L2 Certification
By Kyle Lai, President and CISO of KLC Consulting Lead CMMC Certified Assessor (CCA)CISSP, CSSLP, CISA, CDPSE, CIPP/US, CIPP/G, ISO 27001 Lead Auditor How A Defense Contractor Navigated the CMMC Certification Process This CMMC implementation strategy article details how a large, advanced defense software and manufacturing company successfully navigated the CMMC Level 2 certification process.… Read More »
-
Collaborate to Succeed: CMMC Level 2 Assessments
Introduction In a recent podcast interview, Kyle Lai CCA, the President and CISO of KLC Consulting, sat down with Bobby Guerra and Kaleigh Floyd from Axiom.Tech’s Climbing Mount CMMC. Hear Kyle provide background on strategies for software compliance, document coordination and preparedness, and choosing the right C3PAO for your CMMC Level 2 Assessment. This post… Read More »
-
Lessons Learned from CMMC Level 2 Assessments
Introduction In a recent webinar, Kyle Lai CCA, the President and CISO of KLC Consulting, sat down with Kevin Hancock, the Director of Solutions at Exostar. During this engaging presentation and Q&A, Kyle and Kevin answer burning questions from DoD contractors and subcontractors. This post distills insights from Exostar’s “Lessons Learned on Certification Assessments –… Read More »
-
CMMC: Prepare for 48 CFR – Now
Schedule Your CMMC Level 2 Assessment Ahead of the Bottleneck The race for CMMC Level 2 assessments is on, and it’s not hard to see why. With roughly 77,000 organizations seeking certification and fewer than 70 CMMC Third-Party Assessment Organizations (C3PAOs) available, the competition for assessment slots is heating up. If your organization contracts with… Read More »
-
The CSP Definition for CMMC
Cloud Service Providers: What OSCs Need to Know Introduction At KLC Consulting, Inc., as a C3PAO, we frequently encounter uncertainty among Organizations Seeking Certification (OSCs) about what truly constitutes a CSP under the CMMC Program Rule (32 CFR Part 170). This article – The CSP Definition for CMMC aims to clarify the definition based on… Read More »
-
Ace Your CMMC Level 2 Assessment
Introduction The path to CMMC Level 2 Certification can seem daunting, but with the right guidance, it becomes a clear and achievable process. For DoD contractors, achieving CMMC Level 2 is not just a requirement; it’s a commitment to safeguarding sensitive information. This post distills insights from KLC Consulting’s March 2025 “Ask the Experts” webinar,… Read More »
-
CMMC and DOGE
DOGE and CMMC The Cyber AB informed C3PAOs that the feedback from a February 2025 meeting between Ms. Arrington and the Department of Government Efficiency DOGE indicates that the CMMC program is viewed as a good use of non-taxpayer funds. While the DOGE feedback is preliminary and not a final determination, it reinforces the importance… Read More »
Feeling Overwhelmed by CMMC?
Download our essential guide to gain a clear roadmap through every phase of a CMMC Assessment. From foundational preparation and scope definition to navigating the assessment day and understanding post-audit requirements. Don’t leave your CMMC Level 2 success to chance.
Don’t Let Your Security Posture Drift
The Phase II suspension changed the third-party assessment timeline, not the underlying obligation to protect CUI. Use this period to verify your scope, close known gaps, align documentation with implementation, and ensure your SPRS submission accurately reflects your environment.
