5 posts
Cameras collect personal information the moment they're switched on, and some record sound. The New York laws to raise with counsel, and the UniFi Protect settings that put the answers into practice.
DoD suspended CMMC Phase 2 third-party assessments. Five plain-language owner questions on what still applies — self-assessment, DFARS 7012, and MSP asks for any SMB in a regulated supply chain.
Federal agencies and cloud vendors just raised the bar on login and session security (CISA/NIST IR 8587, Sep 15, 2026). Five plain-English questions every SMB owner should ask — whether or not you sell to government, and even if an MSP runs your IT.
CISA’s Secure by Demand Guide helps software customers ask for product security — SSO, MFA defaults, logs, SBOMs — not only a vendor SOC report. Five owner questions for SMBs.
Five plain-language owner questions before a customer security or CUI assessment — paired with NIST SP 1352 (Sep 16, 2026) for any SMB in a regulated supply chain.