Forum Widgets
Latest Discussions
CMMC compliance of existing contracts
Hello All, How do you address CMMC compliance for existing CUI-based contracts which are not based on CMMC (could be based on ITAR/NIST SP 800-171, for instance)? The contract terms were already agreed between federal and contractors, but are still under the current "self-attestation". Or must the current contracts and environments built around the CUI protection for those systems continue with their existing terms, and are not subject to CMMC? Would they just need to complete their contract life in their original compliance terms? Meaning, CMMC only applies to new contracts with the DoD. Thanks, Mark
What are the recommendation and procedures for flagging data as CUI and managing it?
In preparing for our CMMC Certification, as a company that is heavily uses SharePoint and Teams in the Office365 cloud environment -- what are the recommendations and procedures for flagging data as CUI and managing it?
Azure lighthouse and CMMC Compliance
I work for a consulting business which uses Azure Lighthouse to manage clients Azure instances. Can we keep managing GCC or GCC high tenants in lighthouse? How do we ensure compliance with CMMC if using azure Lighthouse ( issues surrounding data locations and movement)?
