Hats. We all have many, but for a small business owner you wear them all at the same time. This includes running your Security Program (unless, and you should, farm work out to an External Service Provider). CMMC isn’t a framework or a standard. You need a program. A one …
soloprenuer
-
-
Scoping out Costs of Solution Architecture
For many small entrepreneurs the cost of CMMC drives your scope. You may engineer a solution that allows you to buy inherited solutions so you do not have to build every security control yourself. Microsoft GCCH will always have lower lifetime costs, but not every contractor can …
-
One Laptop Does Not Need an Enterprise Security Program
A one-person company struggles to prepare for CMMC. Often, folks begin in the wrong place. All month long I am focusing on how a single-user company can create controls that meet NIST SP 800-171 security requirements and pass a CMMC assessment using the NIST SP 800-171A …
-
CMMC for a Company of One: Building a Business Not a Burden
If you are a founder, independent consultant, or owner of a very small defense contractor, NIST SP 800-171 feels overwhelming. You stare at the CMMC scoping guide and know someone wrote it for a company much larger than yours. You may have one employee, one laptop, no server …