· CMMC
CMMC Scoping: Identifying CUI Boundaries in a Microsoft 365 Tenant
How to draw a defensible CUI boundary inside a Microsoft 365 tenant.
Insights
Practical guidance on CMMC, GCC High, and Microsoft 365 compliance for DIB leadership.
Conditional Access Policy Design for DFARS 252.204-7012
Conditional Access policy design in Entra ID for DFARS 252.204-7012 compliance.
DFARS 252.204-7012: What Defense Contractors Are Actually Required to Do
What DFARS 252.204-7012 actually requires of defense contractors. NIST 800-171, 72-hour incident reporting, subcontractor flow-down, and cloud authorization.
Migrating to Microsoft GCC High: A Practical Decision Framework
When defense contractors should migrate to Microsoft 365 GCC High and when commercial M365 is still defensible.
Intune Compliance Baselines for Protecting CUI on Managed Devices
Designing Intune compliance baselines for endpoints that touch CUI.
Microsoft Purview for CUI Data Classification and DLP
How to design Microsoft Purview sensitivity labels and DLP policies for CUI handling.