Updated as the rules change

What changed — and whether it touches your contract.

DFARS clauses, CMMC rule milestones, SPRS policy, and DoD memos, summarized for the owners and program managers who have to respond to them. No recycled press releases.

  • DFARS
  • CMMC Program Rule
  • NIST SP 800-171
  • SPRS
  • DoD memoranda

News

AI Governance on Paper, AI Governance in Production

What the 2026 SANS AI survey reveals about the gap between the two  AI governance has a familiar cybersecurity problem: what exists on paper and what exists in the environment are often two different...

White House AI Framework: Voluntary, and Unpublished

On August 3, the administration confirmed it met its deadline to finalize a voluntary framework for evaluating advanced AI models. The document hasn’t been released, the methodology remains private...

Get it in your inbox

The rules move. You should not have to watch for it.

Short email when something changes in CMMC, DFARS, or SPRS — what moved, and whether it reaches your contract. Nothing when nothing happens.

No sales sequences. Unsubscribe in one click.

Governing AI itself — EU AI Act, ISO 42001, NIST AI RMF — is covered on our sister practice at AI GRC Advisory.