Government Contractors

Need Help Building a CMMC Enclave? Here’s What You Need to Know
Need Help Building a CMMC Enclave?

CMMC

Need Help Building a CMMC Enclave? Here’s What You Need to Know

If you're handling Controlled Unclassified Information (CUI) and pursuing CMMC compliance, defining the right system boundary is a critical first step. One of the most effective—and commonly misunderstood—strategies is the...
Understanding Cybersecurity Maturity Model Certification (CMMC) Levels
Understanding Cybersecurity Maturity Model Certification (CMMC) Levels

Articles

Understanding Cybersecurity Maturity Model Certification (CMMC) Levels

The Cybersecurity Maturity Model Certification (CMMC) is a unified cybersecurity standard mandatory for all Department of Defense (DoD) contractors. This overview covers the CMMC assessment process, requirements across maturity levels,...
A brief history of Department of Defense security requirements
A Brief History of DoD Security Requirements

Infographics

A brief history of Department of Defense security requirements

Take a journey through the highlights of cybersecurity requirements for the Defense Industrial Base.
Insights from Bob Metzger: The Accidental Rule Drop

CMMC

Insights from Bob Metzger: The Accidental Rule Drop

In this short video, Bob Metzger, a well-respected authority on government security laws and regulations related to the Defense Industrial Base and CMMC, speaks with Bill Wootton, chief revenue officer...
Insights from Bob Metzger: CMMC & its impact on MSPs and MSSPs

Insights from Bob Metzger: CMMC & its impact on MSPs and MSSPs

Bob Metzger chats with C3 CRO Bill Wootton about the prevalence of MSPs and MSSPs and their role in CMMC, cybersecurity, & FedRAMP.
Quick Take: Aug 10, 2023 CMMC Update (aka “The Accidental Drop”)

Videos

Quick Take: Aug 10, 2023 CMMC Update (aka “The Accidental Drop”)

Hear from C3's Director of Compliance Services Scott Whitehouse and CRO Bill Wootton as they chat about what we can learn from last week's accidental drop of CMMC materials.
Decoding CMMC Compliance: Understanding When to Use GCC or GCC High

Articles

Decoding CMMC Compliance: Understanding When to Use GCC or GCC High

Latest release of our CMMC Reference Architecture is here!
Steel Root logo surrounded by red sunburst graphic

Latest release of our CMMC Reference Architecture is here!

Semi-annual update to Steel Root's managed compliance offering includes security and usability improvements, enhanced administrative controls, and updates to compliance implementations to help customers prepare for CMMC.
How to Choose the Right MSP for CMMC Compliance Services

How to Choose the Right MSP for CMMC Compliance Services

DoD SBOM: Understanding the Software Bill of Materials
Female engineer with software code colorfully projected onto her

DoD SBOM: Understanding the Software Bill of Materials

Former DoD Chief Software Officer lays out a strategic vision for using Software Bill of Materials (SBOM) to achieve "visual clarity" of vulnerabilities in software that powers everything from administrative...
Microsoft Licensing – Do I Really Need the E/G 5?

Microsoft Licensing – Do I Really Need the E/G 5?

DoD Thunderdome: Legacy Security Enter, Zero Trust Leave
Gray glass dome with dark clouds above it

DoD Thunderdome: Legacy Security Enter, Zero Trust Leave

Thunderdome is a DoD zero-trust prototype that “aims to reconcile zero trust ideals, identity management technology, and the secure access service edge (SASE) concept with endpoint security goals.”