MacZine
Field copies from the compliance frontier
Practitioner-grade articles on CMMC 2.0, NIST 800-171, RMF, and what it actually takes to operate secure systems in the defense industrial base - written, reviewed and versioned in the open. Published from Git, reviewed like code.
Today's Read
Platform Spotlight · AI & Compliance
CMMC MCP Server: Ask Your AI for an SPRS Score or a STIG Rule
A CMMC MCP server makes your AI look up SPRS weights, STIG rules, and award data instead of guessing. Three no-account MacTech servers, tested live.
This week
New issue Mon–Fri · 8:00 AM Eastern
Explainer · Continuous ATO
Continuous ATO Asks for What a Three-Year ATO Never Did
A continuous ATO (cATO) is not an ATO that never expires. What DoD's cATO memo and evaluation criteria demand instead - telemetry, gates, SBOMs.
Column · Buying Outside Help
CMMC Consultant, RPO, MSP, or vCISO: Who Owns Your Program?
Hiring a CMMC consultant? An RPO, an MSP, and a vCISO do three different jobs, and none of them can sign for you. What to ask each before you buy.
Case in Point · Supply Chain
Subcontractor Cybersecurity: Your Sub's SPRS Score Is a Claim
Primes cannot see a sub's score in SPRS. Subcontractor cybersecurity requirements get verified with evidence - here is what to ask for.
Explainer · AI and Proposals
AI Proposal Writing for Government Contracts: What's Allowed
AI proposal writing for government contracts is generally allowed. Certifying what the model invented is not. Three scenarios, three controls.
Platform Spotlight · AI & Compliance
CMMC MCP Server: Ask Your AI for an SPRS Score or a STIG Rule
A CMMC MCP server makes your AI look up SPRS weights, STIG rules, and award data instead of guessing. Three no-account MacTech servers, tested live.
Last week
Sep 21 – Sep 25
An Incident Response Tabletop Exercise That Satisfies 3.6.3
Vulnerability Scanning Under NIST 800-171: How Often Is Enough?
No Past Performance? How New Firms Win Government Contracts
How to Send CUI by Email Without Failing 3.13.8
DCAA Compliant Accounting System: What SF 1408 Actually Tests
Every issue, 48 articles and counting→
Suggest a topic
Working through a CMMC, NIST 800-171, or RMF problem we haven’t covered? Tell us what you’re stuck on - it goes straight into the queue.