Level 1 – Overwatch Tools

Your Whole Office Doesn’t Need to Be Level 2

Your Whole Office Doesn’t Need to Be Level 2 | Overwatch Tools The Enclave Build · Part 1 of 6 Your Whole Office Doesn’t Need to Be Level 2 If your CUI lives on one or two contracts, a Level 1 workplace with a small Level 2 enclave is often the better build: easier to work... Continue reading

What a Task Force Report Can and Cannot Change

What a Task Force Report Can and Cannot Change | Overwatch Tools Reference · The Deviation, Part 3 What a Task Force Report Can and Cannot Change The report will be read as a verdict. It is closer to an opening argument. Here is how to read it when it arrives, and the three documents that... Continue reading

“Suspended” Is the Wrong Word. So Is “Cancelled.”

“Suspended” Is the Wrong Word. So Is “Cancelled.” | Overwatch Tools Industry Update · The Deviation, Part 1 “Suspended” Is the Wrong Word. So Is “Cancelled.” The CMMC pause stopped living in a memo in July. And the September document that half the industry read as the end of the program did not change the CMMC... Continue reading

NIST Rev. 2 to Rev. 3: What Changes for a Small Enclave

Rev. 2 to Rev. 3: What Changes for a Small Enclave | Overwatch Tools The Second Front · Part 3 of 4 Rev. 2 to Rev. 3: What Changes for a Small Enclave The Department of War enforces one revision of NIST SP 800-171. The proposed FAR CUI rule reaches for the next one. If both... Continue reading

Do You Actually Hold CUI on a Civilian Contract?

Do You Actually Hold CUI on a Civilian Contract? | Overwatch Tools The Second Front · Part 2 of 4 Do You Actually Hold CUI on a Civilian Contract? Sensitive, proprietary, and export-controlled are three different things. None of them is automatically Controlled Unclassified Information — and the difference decides your scope. By Rob Maupin, founder... Continue reading

The CMMC Pause Didn’t Touch Your Civilian Contracts

The CMMC Pause Didn’t Touch Your Civilian Contracts: The FAR CUI Rule, Explained | Overwatch Tools The Second Front · Part 1 of 4 The CMMC Pause Didn’t Touch Your Civilian Contracts On July 13 the Department of War suspended CMMC Phase II. Eighteen days earlier, the FAR Council had proposed a governmentwide CUI rule that... Continue reading

Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome

Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome | Overwatch Tools Do It With a Map · Part 6 of 6 Finish Before the Report: The L1 + L2 Sprint That’s Right in Every Outcome The CMMC Reform Task Force reports roughly mid-September. We don’t know what it will say... Continue reading

The Part-Time CUI Enclave: How Small Businesses Do L2 Without Enterprise IT

The Part-Time CUI Enclave: How Small Businesses Do CMMC Level 2 Without Enterprise IT | Overwatch Tools Do It With a Map · Part 5 of 6 The Part-Time CUI Enclave: How Small Businesses Do L2 Without Enterprise IT You don’t secure the whole company. You build one small, contained environment where CUI lives — and... Continue reading

Organized evidence. A scored assessment. An SPRS submission. An affirmation. A date stamp. If you can't hand it over, it isn't done.

From Folder Chaos to a Date-Stamped Package: Finishing Your L1 in 2–4 Weeks

From Folder Chaos to a Date-Stamped Package: Finishing Your CMMC Level 1 in 2–4 Weeks | Overwatch Tools Do It With a Map · Part 4 of 6 From Folder Chaos to a Date-Stamped Package: Finishing Your L1 in 2–4 Weeks Most contractors have never seen what a complete Level 1 self-assessment physically is. That’s why... Continue reading

The Settings Are the Evidence: Device & Network Config Guides, Explained

The Settings Are the Evidence: CMMC Level 1 Device & Network Configuration, Explained Do It With a Map · Part 3 of 6 The Settings Are the Evidence: Device & Network Config Guides, Explained About half of Level 1 isn’t paperwork — it’s configuration. That’s the good news. Settings are fast, finite, and you can finish... Continue reading

Company Address