Compliance · 13 min
CMMC Phase 2 Is Suspended. Your NIST 800-171 Obligations Are Not.
CMMC third-party assessments are suspended — but NIST 800-171, DFARS 7012, and your SPRS score still apply. What MA/NH defense subcontractors should do now.
All posts
Compliance
Compliance · 14 min
Your AI Scribe Is Recording. Did Anyone Ask the Patient?
HIPAA is only half the problem when AI listens to a patient visit. Massachusetts and New Hampshire recording law is the other half, and the rules differ.
Compliance · 15 min
Your Biggest Client Wants to Know What AI You Use
Vendor security questionnaires now have an AI section. Here is what it asks, why "we have a BAA" fails it, and the four things you need in place first.
Compliance · 15 min
Cyber Insurance in 2026: Why SMBs Are Getting Denied at Renewal
Carriers stopped trusting questionnaires. They want proof. Here's what cyber insurance actually requires from SMBs in 2026 — and why most don't find out until renewal week.
Compliance · 4 min
Role of Managed IT Security Services in Compliance and Data Protection
Cyber threats are increasing every year, and businesses face strict regulations around how they manage sensitive information. Protecting data is no longer optio