Netsecurely

Phase 2 of CMMC begins November 10, 2026. For contracts that call for it, Level 2 moves from a self-assessment to a third-party certification, and the difference shows up in the evidence, not the score.

The question business owners keep asking about AI is not which model is best. It is whether someone may paste a client document into a chat tool, and how anyone would know. The answer fits on one page.

In December 2024 the Government Accountability Office reported on how 23 federal civilian agencies were doing against a requirement Congress gave them in 2020: maintain an inventory of their internet-connected devices. Three agencies said they would miss the September 2024 deadline. Six gave no timeframe at all. One reported that it has no IoT devices requiring an inventory. That last answer is the one worth sitting with. It is almost certainly not dishonest. It is what happens when the...