L3Harris Just Put Its Supply Chain on the Clock. Here’s What That Means for You.

Last week, L3Harris Technologies sent an updated letter to its supplier base with a clear message: get CMMC certified by July 30, 2026, or risk losing your place on DoD programs. Three months is not enough time to start. For contractors who haven’t begun the certification process, the timeline is already somewhere between tight and […]

CMMC Level 1 Requires 17 Safeguards 15 Controls

The official FAR clause lists 15 safeguards, but CMMC documentation often references 17 practices. Here is why: 

CMMC inherited the DoD’s earlier mapping from the DFARS 252.204-21 “Basic Safeguarding” table, where two of the FAR requirements were split into multiple CMMC practice IDs during modeling. They are not additional requirements—just a structural carryover from the original DoD-to-NIST mapping exercise.