Cloud
Implementing and Governing the CMMC Level 2 Admin Consent Workflow in Microsoft Entra ID
One bad app consent can undo months of hardening. In a Level 2 tenant, CMMC admin consent is less about convenience and more about change control. If you support defense…
CMMC GCC High Migration Plan for Microsoft 365 in 2026
The hard part of a CMMC GCC High migration isn’t buying licenses. It’s drawing the right boundary for CUI, then moving identity, devices, mail, files, and evidence without breaking daily…
CMMC Level 2 Defender for Endpoint Onboarding in Intune
A device can look healthy in Intune and still fail your CMMC story. If the Defender sensor never onboards, you lose threat telemetry, device risk, and clean audit evidence. When…
SharePoint Permission Audit Checklist for CMMC Level 2
One broken permission can expose an entire CUI library. When I review Microsoft 365 tenants for defense contractors, permissions are often where quiet risk hides. If you manage a CUI…
CMMC Level 2 Browser Hardening Baseline for Edge and Chrome
A locked endpoint with an open browser isn’t locked at all. When I build a browser hardening baseline for CMMC Level 2, I treat Edge and Chrome as managed system…
Purview CUI Labeling for CMMC Level 2 That Holds Up
A mislabeled CUI file can weaken your compliance story fast. When I build Purview CUI labeling for CMMC Level 2, I treat auto-labeling as a force multiplier, not a magic…
CMMC Level 2 Restore Testing Plan for Microsoft 365
A backup no one has restored is a promise, not proof. For teams handling CUI in Microsoft 365, that gap can hurt during an assessment and during a bad day…
CMMC Level 2 Shared Mailbox Security Checklist for Microsoft 365
Shared mailboxes look harmless until CUI lands in one. Then a convenience feature turns into an access-control problem. As of March 2026, I handle CMMC shared mailbox security in Microsoft…
CMMC Audit Log Retention Setup in Microsoft 365
The worst time to think about retention is when an assessor asks for six-month-old evidence and my log search comes back empty. In Microsoft 365, CMMC audit log retention is…
CMMC BYOD Intune: App Protection Policies for Level 2
Personal phones can open a door to CUI fast. They can also open the wrong door if I let work data spill outside managed apps. When I build a CMMC…
CMMC Intune Compliance for iPhone and Android in 2026
A phone that touches CUI stops being “just a phone.” It becomes an endpoint, an access path, and an audit item. When I build CMMC Intune compliance for defense contractors,…
CMMC Level 2 BYOD Policy for Microsoft 365 That Holds Up
Personal devices can speed work, but they can also punch holes in a CUI boundary. For CMMC Level 2 BYOD in Microsoft 365, my rule is simple: if a personal…