# Cyber DSC

> Cybersecurity & CMMC Level 2 (NIST 800-171) compliance consulting for defense contractors


## Posts

- [Snowflake Agent Identity: AI Agents as Privileged Identities](https://cyberdsc.com/snowflake-agent-identity-ai-agents/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [CMMC SPRS Affirmation: Who Can Sign and What the Affirming Official Is Certifying](https://cyberdsc.com/cmmc-sprs-affirmation/): Under 32 CFR § 170.22, the Affirming Official is defined by responsibility and authority, not by title. A CISO may qualify. So may an owner. A systems administrator who knows the environment best often does not — and neither does your MSP, consultant or C3PAO. What the rule actually requires, and what should sit in front of the signatory first.
- [Is C3PAO Still Required? CMMC Phase 2 Suspension Explained?](https://cyberdsc.com/is-c3pao-still-required-cmmc-phase-2-suspension-explained/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI supply chain](https://cyberdsc.com/ai-supply-chain/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Can you put CUI into generative AI](https://cyberdsc.com/can-you-put-cui-into-generative-ai/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI Vendors Under CMMC: ESP, SPA, or Neither?](https://cyberdsc.com/ai-vendors-under-cmmc-esp-spa-or/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [SPRS score vs CMMC: what the Phase 2 pause did not change](https://cyberdsc.com/sprs-score-vs-cmmc-what-the-phase-2-pause-did-not-change/):  what the Phase 2 pause did not change Two separate obligations that contractors routinely collapse into one. The certification milestone is suspended; the self-assessment, the posted score and the annual affirmation are not. What you still owe under 7019 and 7020. 
- [AI in CMMC Level 2: Innovation Without Control Is Risk](https://cyberdsc.com/ai-cmmc-level-2-governance/):  Innovation Without Control Is Risk An engineer pastes a firewall config into a chat window and solves the problem in four minutes. Why that is a control failure, and how to permit AI use without putting CUI outside your boundary. 
- [Data center security: What AI changes, and what it doesn't](https://cyberdsc.com/data-center-security-what-ai-changes-and-what-it-doesnt/): What AI changes, and what it doesn’t Four areas where AI workloads genuinely alter the control set — power and cooling, cluster fabric, accelerator tenancy, data disposal — and the much longer list where the existing 800-53 baseline already covers you.
- [AI cybersecurity threats, defined for a CUI environment](https://cyberdsc.com/ai-cybersecurity-threats-defined-for-a-cui-environment/): defined for a CUI environment Most threat lists mix three unrelated things: AI used against you, attacks on the AI you deploy, and risk you create yourself. Separating them is what makes the list usable for scoping.
- [AI in a CUI Environment: What Actually Changes in Each Governance Process](https://cyberdsc.com/ai-in-a-cui-environment-what-actually-changes-in-each-governance-process/): What Actually Changes in Each Governance Process This is not a new compliance program. Walking through inventory, access management, boundary control and classification to show which existing processes need a line added, and which need nothing.
- [Securing the Defense AI Supply Chain: A Practical CMMC 2.0 and NIST Framework for Vendor Management](https://cyberdsc.com/securing-the-defense-ai-supply-chain-a-practical-cmmc-2-0-and-nist-framework-for-vendor-management/): A Practical CMMC 2.0 and NIST Framework for Vendor Management Your vendors are shipping AI features you did not evaluate. A working approach to assessing AI in the supply chain against CMMC and NIST expectations, without a questionnaire nobody answers honestly.
- [AI Governance by Design: Building Controls Into the Development Lifecycle](https://cyberdsc.com/ai-software-development-life-cycle/): Building Controls Into the Development Lifecycle Most AI governance programs are assembled in the wrong order — after the model is in production, when someone asks what it was trained on. What it looks like to build the controls in first.
- [AI Governance on Paper, AI Governance in Production](https://cyberdsc.com/ai-governance-on-paper-ai-governance-in-production/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI Agents in Cyber Operations: Innovation, Governance and Human Oversight](https://cyberdsc.com/ai-agents-in-cyber-operations-innovation-governance-and-human-oversight/): CMMC compliance Jacksonville defense contractor NIST 800-171
- [CMMC Scoping Guide](https://cyberdsc.com/cmmc-scope/): what the rule actually says) What 32 CFR § 170.19 requires when categorizing assets, and the four places companies get it wrong. Most contractors find their boundary is wider than they assumed.
- [CMMC Readiness 2026](https://cyberdsc.com/cmmc-readiness-phase-2/): CMMC readiness: why so many companies think they’re ready) A template SSP, a score posted two years ago, and no asset inventory is not readiness. What a government-led assessment actually asks for, and how to test yourself against it before someone else does.
- [White House AI Framework: Voluntary, and Unpublished](https://cyberdsc.com/the-white-house-finished-its-ai-framework-you-cant-read-it-and-thats-not-the-point/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Get Familiar with Your Controls: Building Sustainable CMMC Compliance](https://cyberdsc.com/get-familiar-with-your-controls-building-sustainable-cmmc-compliance/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI in CMMC Environments: Hidden Risks to CUI and How to stay compliant](https://cyberdsc.com/using-ai-tools-in-a-cmmc-environment-risks-cui-protection-and-governance/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Managing Insider Risk: Protecting Confidential Information Shared by Employees in GenAI Platforms](https://cyberdsc.com/managing-insider-risk-protecting-confidential-information-shared-by-employees-in-genai-platforms/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Evolving the GRC Role in the AI Era: NIST AI RMF](https://cyberdsc.com/evolving-the-grc-role-in-the-ai-era-nist-ai-rmf/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI Awareness Training for Defense Contractors](https://cyberdsc.com/ai-awareness-training-defense-contractors/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]

## Pages

- [Privacy Policy](https://cyberdsc.com/privacy-policy/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [News](https://cyberdsc.com/new/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [AI Governance](https://cyberdsc.com/ai-governance/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Contact US](https://cyberdsc.com/contact/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Insights ](https://cyberdsc.com/insights/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Services](https://cyberdsc.com/services/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [SPRS Assessment](https://cyberdsc.com/sprs-assessment/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [Home](https://cyberdsc.com/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]
- [About Cyber DSC](https://cyberdsc.com/about-us/): Jacksonville, FL · Serving the Defense Industrial Base nationwide CMMC & NIST SP 800-171Readiness for contractors who hold CUI Fixed-scope, fixed-fee compliance work for small and mid-sized defense contractors — scope determination, SPRS score validation, and documentation that holds up to a contracting officer, a prime, or a third-party assessor. Book a discovery call Take the 5-minute self-check CMMC · NIST SP 800-171 Rev. 2 · DFARS 252.204-7012 · SPRS Nabiha Sofia Herradi CMMC-CCP · CISM · CISA CIPP/E · CIPP/US · LL.B (J.D.) 15+ years in GRC Who we work with CMMC consulting for defense contractors who hold CUI Cyber […]


[comment]: # (Generated by Hostinger Tools Plugin)