cmmc – Overwatch Tools

Ready Before the Contract

Ready Before the Contract: A Level 2 Enclave for Level 1 Companies | Overwatch Tools The Enclave Build · Part 2 of 6 Ready Before the Contract No CUI today? If you want to compete for work that carries it, a small Level 2 enclave built on a solid Level 1 foundation lets you say “yes,... Continue reading

Your Whole Office Doesn’t Need to Be Level 2

Your Whole Office Doesn’t Need to Be Level 2 | Overwatch Tools The Enclave Build · Part 1 of 6 Your Whole Office Doesn’t Need to Be Level 2 If your CUI lives on one or two contracts, a Level 1 workplace with a small Level 2 enclave is often the better build: easier to work... Continue reading

What a Task Force Report Can and Cannot Change

What a Task Force Report Can and Cannot Change | Overwatch Tools Reference · The Deviation, Part 3 What a Task Force Report Can and Cannot Change The report will be read as a verdict. It is closer to an opening argument. Here is how to read it when it arrives, and the three documents that... Continue reading

The Department Asked Seven Questions. Read Them Closely.

The Department Asked Seven Questions. Read Them Closely. | Overwatch Tools Analysis · The Deviation, Part 2 The Department Asked Seven Questions. Read Them Closely. The Task Force report isn’t public. The questions that shaped it have been public since July — and almost nobody has read them carefully. By Rob Maupin, Overwatch Tools — author... Continue reading

“Suspended” Is the Wrong Word. So Is “Cancelled.”

“Suspended” Is the Wrong Word. So Is “Cancelled.” | Overwatch Tools Industry Update · The Deviation, Part 1 “Suspended” Is the Wrong Word. So Is “Cancelled.” The CMMC pause stopped living in a memo in July. And the September document that half the industry read as the end of the program did not change the CMMC... Continue reading

NIST Rev. 2 to Rev. 3: What Changes for a Small Enclave

Rev. 2 to Rev. 3: What Changes for a Small Enclave | Overwatch Tools The Second Front · Part 3 of 4 Rev. 2 to Rev. 3: What Changes for a Small Enclave The Department of War enforces one revision of NIST SP 800-171. The proposed FAR CUI rule reaches for the next one. If both... Continue reading

Do You Actually Hold CUI on a Civilian Contract?

Do You Actually Hold CUI on a Civilian Contract? | Overwatch Tools The Second Front · Part 2 of 4 Do You Actually Hold CUI on a Civilian Contract? Sensitive, proprietary, and export-controlled are three different things. None of them is automatically Controlled Unclassified Information — and the difference decides your scope. By Rob Maupin, founder... Continue reading

The CMMC Pause Didn’t Touch Your Civilian Contracts

The CMMC Pause Didn’t Touch Your Civilian Contracts: The FAR CUI Rule, Explained | Overwatch Tools The Second Front · Part 1 of 4 The CMMC Pause Didn’t Touch Your Civilian Contracts On July 13 the Department of War suspended CMMC Phase II. Eighteen days earlier, the FAR Council had proposed a governmentwide CUI rule that... Continue reading

Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome

Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome | Overwatch Tools Do It With a Map · Part 6 of 6 Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome The CMMC Reform Task Force reports roughly mid-September. We don’t know what it will say... Continue reading

The Part-Time CUI Enclave: How Small Businesses Do L2 Without Enterprise IT

The Part-Time CUI Enclave: How Small Businesses Do CMMC Level 2 Without Enterprise IT | Overwatch Tools Do It With a Map · Part 5 of 6 The Part-Time CUI Enclave: How Small Businesses Do L2 Without Enterprise IT You don’t secure the whole company. You build one small, contained environment where CUI lives — and... Continue reading

Company Address