soloprenuer

A one-person company rarely wants two complete technology environments. Every additional device, mailbox, account, security tool, and login creates more work for the same person who already serves as owner, contracts manager, security officer, bookkeeper, and technical staff. It …

Hats. We all have many, but for a small business owner you wear them all at the same time. This includes running your Security Program (unless, and you should, farm work out to an External Service Provider). CMMC isn’t a framework or a standard. You need a program. A one …

For many small entrepreneurs the cost of CMMC drives your scope. You may engineer a solution that allows you to buy inherited solutions so you do not have to build every security control yourself. Microsoft GCCH will always have lower lifetime costs, but not every contractor can …

A one-person company struggles to prepare for CMMC. Often, folks begin in the wrong place. All month long I am focusing on how a single-user company can create controls that meet NIST SP 800-171 security requirements and pass a CMMC assessment using the NIST SP 800-171A …

If you are a founder, independent consultant, or owner of a very small defense contractor, NIST SP 800-171 feels overwhelming. You stare at the CMMC scoping guide and know someone wrote it for a company much larger than yours. You may have one employee, one laptop, no server …

Often times for small businesses it feels as if NIST-SP-800-171 does not scale down. It seems to protect the confidentiality of Controlled Unclassified Information the Government built an overlay, meant for large organizations, from NIST-SP-800-53 For example, small and …