# Cybersecurity Blog

#### [The Evolution and Enforcement of CMMC with Jacob Anderson](/content/cybersecurity-blog/the-evolution-and-enforcement-of-cmmc-with-jacob-anderson/index.html)

In the latest episode of Trust Issues, Jacob Anderson joins the team to discuss the practical realities of achieving and maintaining CMMC...

#### [Why CMMC Readiness Falls Apart in the Interview Room](/content/cybersecurity-blog/why-cmmc-readiness-falls-apart-in-the-interview-room/index.html)

CMMC programs might look like they’ll pass on paper, but fall apart in the interview. Assessor Fanta-Marie Toure shares how organizations can better...

#### [Announcing BEMO's CMMC Level 2 Certification](/content/cybersecurity-blog/bemo-is-cmmc-level-2-certified-provider/index.html)

BEMO is now CMMC Level 2 certified! Here's what we learned going through it, and what it means for the companies counting on us to help them get...

#### [The Truth About CMMC Mock Audits](/content/cybersecurity-blog/cmmc-level-2-mock-audit/index.html)

Most organizations approach CMMC Level 2 certification with the wrong question. They ask: What do we need to pass the audit? But the better question...

#### [Inside BEMO's CMMC Level 2 Certification: 7 Takeaways From Our Team](/content/cybersecurity-blog/cmmc-level-2-takeaways-from-a-successful-team/index.html)

BEMO recently earned CMMC Level 2 certification. But behind that announcement was a team of people across security, IT, operations, data, and HR who...

#### [Security Lessons from a Microsoft Veteran](/content/cybersecurity-blog/security-lessons-from-a-microsoft-veteran/index.html)

Bruno Lecoq spent twenty years at Microsoft before founding BEMO. He realized that the small and medium business sector lacked practical...

#### [Rethinking Cybersecurity in the Defense Industrial Base](/content/cybersecurity-blog/rethinking-cybersecurity-in-the-defense-industrial-base/index.html)

For organizations working with primes like Lockheed Martin or Boeing, frameworks such as CMMC, DFARS and ITAR aren’t optional checkboxes. They are...

#### [Everything You Need to Know About CMMC Compliance](/content/cybersecurity-blog/everything-you-need-to-know-about-cmmc-compliance/index.html)

For companies that work with the U.S. Department of Defense (DoD) or its contractors, cybersecurity compliance is no longer optional. Frameworks like...

#### [CMMC Level 2 Requirements: What You Need to Comply](/content/cybersecurity-blog/cmmc-level-2-compliance-guide/index.html)

Quick answer: CMMC Level 2 requires defense contractors handling Controlled Unclassified Information (CUI) to implement all 110 security controls...

#### [FedRAMP vs CMMC: What Defense Contractors Must Know](/content/cybersecurity-blog/fedramp-vs-cmmc-defense-contractors/index.html)

Quick Answer: CMMC applies to DoD contractors handling FCI or CUI. FedRAMP authorizes cloud service providers selling to federal agencies. Most...

#### [There’s a Real Cost to “We’re Too Small to be Attacked”](/content/cybersecurity-blog/thinking-you-are-too-small-to-be-attaked-is-a-mistake/index.html)

Small and mid-sized companies, especially government contractors, still cling to one comforting belief: “We’re too small to be worth attacking.” But...

#### [The CMMC Revolution: How BEMO Is Redefining Compliance.](/content/cybersecurity-blog/cmmc-blueprint/index.html)

Bruno Lecoq spent 20 years at Microsoft before co-founding BEMO. He didn’t leave because he disliked the company. In fact, he says he “owes his life...

#### [The Hardest Part About Compliance Isn’t Certifications, It’s Discipline](/content/cybersecurity-blog/the-hardest-part-about-compliance/index.html)

Most companies think the toughest part about compliance is the technology or getting all the right certifications. They’re wrong. The toughest part...

#### [Does CMMC Require GCC High? Microsoft 365 Paths to CMMC Level 2](/content/cybersecurity-blog/cmmc-gcc-high-microsoft-365-compliance/index.html)

Quick Answer: No, CMMC does not require GCC High, but your contracts often do. While the framework defines security controls, DFARS clauses, data...

#### [What Is a CMMC Enclave? When to Build One and When to Buy One](/content/cybersecurity-blog/cmmc-enclave-build-vs-buy-guide/index.html)

Quick Answer: A CMMC enclave is an isolated IT environment where Controlled Unclassified Information is stored and processed, letting DoD contractors...