Zvi Melkman·Sep 15SPRS Stores Three Dates for Your NIST 800–171 Score. Only One Ever Turns Red.The one that can end up in a DOJ press release is one of the other two.A response icon1
Zvi Melkman·Sep 3The Next CMMC Date Isn’t a Deadline. It’s a Report.The Reform Task Force owes its findings this month. Here is what it can change, and what it can’t.A response icon1
Spartan Cyber Security·Aug 31Is achieving CMMC Level 2 Compliance really that difficult?The controls aren’t the hard part. Here’s what actually derails CMMC Level 2 implementation, and the 2026 timeline shift
Zvi Melkman·Aug 25The Sentence in Your CMMC SSP That a Port Scan Can Now DisproveFive agencies just described how AI-written scripts find Siemens PLCs on the open internet. The scoping rule says those PLCs are yours to…A response icon1
D.G. Comer·Jul 14CMMC Phase II Is Suspended — But Defense Contractors Are Not Excused From CybersecurityCMMC Phase II Is Suspended — But Defense Contractors Are Not Excused From Cybersecurity