Office 365
CMMC Level 2 Evidence Binder in SharePoint, a folder structure, naming rules, and a weekly evidence habit that works
If your CMMC Level 2 plan lives in people’s heads, your audit will feel like a fire drill. I’ve watched small and mid-sized defense contractors spend weeks hunting for screenshots,…
Microsoft Teams for CUI in CMMC Level 2, a step-by-step hardening checklist (guest access, file sharing, meeting chat, recordings)
Microsoft Teams can feel like a conference room, a file cabinet, and a phone system all in one. That’s great for speed, but it’s also how Controlled Unclassified Information (CUI)…
CMMC Level 2 User Provisioning And Deprovisioning Checklist In Entra ID
How many “temporary” accounts are still active in your tenant right now? If you handle CUI, that question isn’t academic. Under CMMC user provisioning expectations, every account needs a clear…
CMMC Level 2 SSP Template for Small Contractors (Microsoft 365 + Enclave), sections, screenshots, and what assessors actually check
If you’re a small defense contractor, your CMMC SSP template can’t read like a policy brochure. It has to read like a map. A map of where CUI lives, who…
CMMC Level 2 Enclave vs Separate Tenant in Microsoft 365, decision tree, costs, and evidence you’ll need
If you’re chasing CMMC Level 2, the fastest way to blow your schedule (and your budget) is to scope Microsoft 365 the wrong way. I see it all the time:…
CMMC Level 2 eDiscovery And Legal Hold Setup In Purview
If you’re handling CUI in Microsoft 365, you don’t get to treat retention and holds like a “set it once” task. Under CMMC Level 2, I’ve found auditors and incident…
CMMC Level 2 Email Forwarding Controls In Exchange Online
Email forwarding looks harmless until it isn’t. One inbox rule can copy Controlled Unclassified Information (CUI) to a personal mailbox, a vendor, or a compromised account. In March 2026, I…
Restaurant Technology Onboarding Checklist, Set Up New Hires Without Shared Logins or Lost Devices
If you’ve ever had a new hire ask, “What’s the POS login?” and three people answer with the same PIN, you already know why a restaurant onboarding checklist matters. Shared…
CMMC Level 2 Secure Admin Workstations Using Intune And Defender
If you administer Microsoft 365 or servers for a defense contractor, you already know the weak spot: admin credentials. One phish, one token theft, one reused browser session, and an…
CMMC Level 2 O365: Microsoft Defender For Office 365 Baseline Setup
Email is still the easiest door into a contractor’s environment. One good phish can turn into stolen credentials, mailbox rules, and quiet data theft that nobody spots for weeks. When…
CMMC Level 2 Retention Policies In Microsoft Purview Setup Guide
If you handle CUI, retention can’t be a vague “we keep stuff for a while” promise. In a CMMC Level 2 assessment, I want to show what’s kept, for how…
Microsoft Defender For Business Setup Guide For Small Teams
If you’re a small team, security can feel like trying to lock every door in a busy building while still letting customers in. The good news is that Microsoft Defender…