MacZine
The MacTech Solutions Newsletter
Topic · 4 articles
Topic · 4 articles
SPRS
Every MacZine article on SPRS, newest first - written, reviewed and versioned in the open.
030Issue Nº
Read the Solicitation's Compliance Clauses Before You Bid
Compliance cost gets decided at bid or no-bid, not after award. A front-to-back read of the clauses, DD-254, and Section L/M that actually price it.
025Issue Nº
3.5.3: The MFA Control Most Programs Think They Already Passed
NIST 800-171 3.5.3 requires MFA for three scopes, not one. Most programs cover network logins and miss privileged local access - the one assessors test first.
023Issue Nº
What You Can Put on a POA&M, and What You Cannot
A POA&M restores no SPRS points and cannot carry the highest-weight controls. Here are the rules that decide what actually belongs on one.
008Issue Nº
How Your SPRS Score Is Actually Calculated
The DoD Assessment Methodology scores 110 controls on a 5/3/1 weighting and bottoms out at -203. Here is the arithmetic, and how a CO reads it.