Home / Resources
Resources
No gated PDFs, no fear marketing. These are the answers we give clients, written down: accurate to 32 CFR Part 170 and the official guides, by a CISSP and CMMC Certified Professional.
15 practices, 59 assessment objectives, 6 domains. The exact numbers, where they come from, and what an assessor actually checks.
Read the answer → ScopingThe level is set by the information you handle, FCI or CUI, and the clauses in your contract. How to read yours.
Read the answer → Microsoft 365No cloud makes you compliant. What GCC High actually gives you, when you need it, and what always stays your responsibility.
Read the answer → SPRSStart at 110, subtract 1, 3, or 5 per unmet requirement, land anywhere down to minus 203. The methodology, with the two partial-credit cases.
Read the answer → TimelineThe DFARS clause began a phased rollout on November 10, 2025. Which phase affects you, and why waiting is the expensive option.
Read the answer →Every figure on these pages traces to 32 CFR Part 170, the CMMC Assessment and Scoping Guides v2.13, FAR 52.204-21, DFARS 252.204-7012/7021, or NIST SP 800-171 Rev. 2. Spot something outdated? Tell us and we will fix it.
A short conversation usually settles it. No pitch, just answers.
Talk to CyberDeka