Integrations
Find your next step
RSS feed17 guides · Page 1 of 2
- Daily operations
How can an MSP offer CMMC readiness without hiring assessors?
Sell the remediation, the managed controls, and the evidence upkeep. Never sell the certificate. What puts an MSP in scope, and how to price the work.
Andrew Erne - Cloud and vendors
How many CMMC controls does Microsoft 365 GCC High cover (vs GCC and Commercial)?
Microsoft's own placemat says GCC High fully covers 52 of the 110 CMMC Level 2 requirements, shares 57, and leaves you 1. It publishes no count for GCC or Commercial. What the 52 really buy you.
Andrew Erne - Cloud and vendors
How many CMMC controls does PreVeil cover?
PreVeil's matrix says it handles 37 of the 110 CMMC Level 2 requirements. You share 65 and own 8. Its "102 of 110" is the first two numbers added together.
Kyle Fahey - Cloud and vendors
How many CMMC controls does CrowdStrike Falcon cover?
Falcon helps with 71 of the 110 CMMC Level 2 requirements, and you inherit none of them. It's a security tool, not a cloud that holds your CUI, so every one of the 71 is still yours to set up and prove.
Kyle Fahey - Cloud and vendors
How many CMMC controls does AWS GovCloud cover?
AWS says 21 of the 110 CMMC Level 2 requirements are fully inheritable, 79 are shared, and 10 are yours. The 21 are AWS's buildings, disks, and hardware, so most of the work lands on you.
Andrew Erne - Cloud and vendors
How many CMMC controls does Google Workspace cover?
Google's CMMC guide says Workspace fully handles 42 of the 110 CMMC Level 2 requirements. You share 58 and own 9 outright, and 15 of the "shared" ones have nothing in Workspace to share.
Andrew Erne - Cloud and vendors
What belongs in my Microsoft 365 CUI boundary?
Follow one CUI drawing through your tenant. Every place it lands, and every admin who can reach it, is in your boundary. Two SharePoint settings close most of the leaks.
Andrew Erne - Self-assessment & SPRS
Does changing a security tool or MSP affect my CMMC assessment?
Usually not. Swaps inside the same boundary are covered by your annual affirmation. Network expansion or an acquisition needs a new assessment. Mind the cutover gap.
Kyle Fahey - Cloud and vendors
Can I use Google Workspace for CMMC Level 2?
Yes. Keep CUI in Workspace Enterprise Plus with Assured Controls Plus, or keep it out of Workspace entirely. What to buy, what Google does and doesn't commit to, and the Chromebook test that catches the leaks.
Kyle Fahey
