<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Cmmc on Sean Ross</title><link>https://www.seanross.us/tags/cmmc/</link><description>Recent content in Cmmc on Sean Ross</description><generator>Hugo</generator><language>en</language><lastBuildDate>Wed, 06 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.seanross.us/tags/cmmc/index.xml" rel="self" type="application/rss+xml"/><item><title>Janus: A Zero Trust OT Gateway for Wichita's Machine Shops</title><link>https://www.seanross.us/posts/janus-cmmc-wichita/</link><pubDate>Wed, 06 May 2026 00:00:00 +0000</pubDate><guid>https://www.seanross.us/posts/janus-cmmc-wichita/</guid><description>&lt;p&gt;A local machine shop shouldn&amp;rsquo;t need a six-figure compliance project just to keep doing business with Spirit or Textron. But that&amp;rsquo;s where CMMC 2.0 is putting them.&lt;/p&gt;
&lt;p&gt;The DoD&amp;rsquo;s final rule went into force at the end of 2024, and the phased rollout is now landing in real contracts. Any contractor or subcontractor that touches Controlled Unclassified Information has to demonstrate, on paper, that they meet the 110 controls in NIST 800-171. The big primes have been preparing for years. The 30-person shops in their supply chain, mostly, have not.&lt;/p&gt;</description></item></channel></rss>