Remediation
Find your next step
RSS feed11 guides · Page 1 of 2
- Self-assessment & SPRS
POA&M rules: what you can and cannot leave open
Only 47 of the 110 requirements can ever sit on a CMMC POA&M, you need 88 points to use one, and the 180-day clock doesn't stop. What the rule allows, and what happens when it runs out.
Andrew Erne - Daily operations
How can an MSP offer CMMC readiness without hiring assessors?
Sell the remediation, the managed controls, and the evidence upkeep. Never sell the certificate. What puts an MSP in scope, and how to price the work.
Andrew Erne - Machine shops
Swiss Automation paid $421,234 over drawing security. What does that mean for your shop?
What analysts called the first cyber False Claims Act settlement below the prime tier started with the shop's own quality manager. What DOJ alleged, how it connects to your SPRS score, and what to do if the number you posted is wrong.
Andrew Erne - Machine shops
How do you get programs to a Windows XP CNC control under CMMC?
Your controls run XP, Windows 7 or DOS, and programs still have to reach them. Pick one transfer method, keep the machines, time-box the builder's remote access, and write the controller up the way the rule allows.
Kyle Fahey - Machine shops
Can machinists share one login on the shop floor PC under CMMC?
Machinists won't type a password at the kiosk, and management agrees. A shared login still fails the requirement. Here are the fast sign-in options that pass, and the floor rules for phones, travelers and visitors.
Andrew Erne - Self-assessment & SPRS
Which CMMC gaps should I fix first?
Close live exposure first, then anything that blocks your status, then what other work depends on. Points come last.
Andrew Erne - Daily operations
CMMC certification and readiness costs: build a comparable budget
Separate readiness, implementation, subscriptions and assessment fees. Build a scope-based budget and compare quotes without treating estimates as market guarantees.
Kyle Fahey - Daily operations
What is a security baseline, and how do I apply it?
A baseline is the written list of settings a set of devices must run. Pilot it on three laptops, check every device, and count only what you can prove.
Andrew Erne - Self-assessment & SPRS
How does SPRS scoring work: 110, 88, and negative scores?
Start at 110, lose 1, 3, or 5 points per unmet requirement, down to −203. What 88 really means, who sees the number, and why rounding up is the costly mistake.
Kyle Fahey
