Latest
Which compliance platforms support GovRAMP and TX-RAMP?
Which GovRAMP and TX-RAMP levels does a platform cover, what does it leave out, and who grants the status? A nine-question checklist.
ComplianceONE Blog
Compliance insights for small defense suppliers
Guides, framework crosswalks and checklists for CMMC, NIST 800-171, FedRAMP and the rest of federal cybersecurity compliance.
FedRAMP 20x KSIs explained: the 46 on FedRAMP's list
FedRAMP's KSI page lists 46 Key Security Indicators in 10 themes (our count, read Nov. 2, 2026). See the themes, samples, and the 7 on the Class A page.
NIST 800-171 Rev 2 vs Rev 3: what changed
NIST withdrew Rev 2 (110 requirements) in May 2024 for Rev 3 (97 by our count, 17 families). CMMC Level 2 still cites Rev 2 in 32 CFR 170 (eCFR, Oct 2026).
CMMC Level 1 self-assessment checklist
Check the 15 FAR 52.204-21 requirements, score each MET or NOT MET, keep your evidence, and have a senior official affirm the result in SPRS every year.