MacZine
The MacTech Solutions Newsletter
Topic · 4 articles
Topic · 4 articles
CMMC Level 2
Every MacZine article on CMMC Level 2, newest first - written, reviewed and versioned in the open.
072Issue Nº
3.11.1 Asks How Often You Assess Risk. Most Shops Never Said
NIST 800-171 control 3.11.1 is worth 3 SPRS points, and its first objective is a schedule. One risk assessment, followed month by month.
070Issue Nº
Every Patch Is a Change, and 3.4.3 Wants the Ticket to Prove It
NIST 800-171 change control, 3.4.3 and 3.4.4, is worth 1 SPRS point each and easy to defer. Why a small shop should not, and what the ticket must show.
065Issue Nº
Retiring a Drive That Held CUI Under NIST 800-88 Rev. 2
NIST rewrote its media sanitization guide in September 2025. What 3.8.3 now asks of a small contractor retiring a laptop, an SSD, or a copier.
064Issue Nº
3.9.2 Fails on the Transfer, Not the Termination
NIST 800-171 control 3.9.2 is worth 5 SPRS points. Firings are handled. The engineer who moved to a commercial program and kept enclave access is not.