Compliance · 13 min
CMMC Phase 2 Is Suspended. Your NIST 800-171 Obligations Are Not.
CMMC third-party assessments are suspended — but NIST 800-171, DFARS 7012, and your SPRS score still apply. What MA/NH defense subcontractors should do now.
All posts
Tag: Compliance
Compliance · 14 min
Your AI Scribe Is Recording. Did Anyone Ask the Patient?
HIPAA is only half the problem when AI listens to a patient visit. Massachusetts and New Hampshire recording law is the other half, and the rules differ.
Compliance · 15 min
Your Biggest Client Wants to Know What AI You Use
Vendor security questionnaires now have an AI section. Here is what it asks, why "we have a BAA" fails it, and the four things you need in place first.