Cloud Security
-
The CMMC Inheritance Shortcut: MSPs, CSPs, and the 90% You Don't Own
A contractor can inherit 80 to 90 percent of its CMMC controls from an MSP or cloud platform. The shortcut solves the cost and assessor bottleneck, and it concentrates the residual risk in a customer responsibility matrix most small firms can't read.
-
FedRAMP Is Replacing Impact Levels with Certification Classes — and Every Cloud Provider Has a Deadline
FedRAMP's 2026 rules retire Low/Moderate/High certification labels for Certification Classes A through D. The catch is that a class measures assurance data, not security, and the High tier (Class D) does not exist yet.