CMMC
CUI Spillage Response in Microsoft 365
One misplaced email can turn a normal workday into a contract problem. When CUI lands in the wrong Microsoft 365 location, speed matters, but random action makes things worse. I…
CMMC Level 2 Token Protection Setup Guide
An attacker doesn’t need your password if they can replay your token. In a CMMC Level 2 environment, that gap matters because a stolen session can expose the same CUI…
Defender XDR Triage SOP for Small CMMC Teams
A 4:47 PM alert can wreck a small team if nobody knows who owns it. In a CMMC Level 2 setting, that delay costs more than time, because you also…
CMMC Level 2 Entra Terms of Use Setup Guide
A Terms of Use prompt looks small, yet it closes a gap that auditors notice fast. If users can reach Microsoft 365 resources tied to CUI without accepting the rules,…
CMMC Retention Labels for CUI in Purview
A lot of CMMC work breaks down at the same point: teams can identify Controlled Unclassified Information, but they still don’t know how long to keep it or how to…
Azure Bastion Checklist for CMMC Level 2
Admin access is where solid Azure security often breaks down. One public RDP port, one shared admin account, or one weak exception can undo months of hardening. If you handle…
CMMC Level 2 Authentication for CUI SharePoint Sites
Most SharePoint sites can live with a baseline sign-in policy. A site that stores CUI can’t. When I protect Controlled Unclassified Information in Microsoft 365, I want one extra checkpoint…
Exchange Online Transport Rules for CUI in CMMC Level 2
One bad auto-complete can send CUI outside your boundary in seconds. That is why I treat email controls as a front-line issue in CMMC Level 2, not a side setting…
Entra Administrative Units for CMMC Level 2
Most CMMC trouble starts with a simple identity mistake, too many admins with tenant-wide reach. In Microsoft 365, that creates more access than the job requires, and it makes audits…
Microsoft 365 DMARC for CMMC Level 2
A spoofed message can undo months of security work in one click. That is why I treat Microsoft 365 DMARC setup as a core security task, not a mail admin…
CMMC Level 2 Quick Assist Remote Support Policy
When I advise defense contractors, I start with a blunt point: casual screen sharing is hard to defend in a CMMC review. If a system can display CUI, every remote…
CMMC Entra ID KQL for Level 2 Evidence
An assessor won’t accept “we monitor Entra ID” on faith. I need records that show who signed in, what changed, when it happened, and whether the control worked. That is…