ResourcesBlogTag: 2026
Blog entries tagged 2026
Every blog entry tagged 2026, newest first. Tags group the blog by subject so a reader working one requirement can follow it across entries as the rules change. Each entry shows when it was published and last updated; every entry is listed on the blog index.
2 entries
Entries, newest first
- CMMC Level 2 Requirements in 2026: The Complete GuideCMMC Phase II is suspended, but the 110-requirement NIST 800-171 Rev. 2 baseline, Phase I self-assessments, and DFARS safeguarding obligations remain active.
- CMMC Phase II Timeline Suspended: What the 60-Day Review ChangesThe Department of War suspended the November 2026 Phase II transition and future milestones.
Related records
Guides and articles describe the work. The evidence that work produces is described in three proof pages, the architecture page, and the two pages on authorization.
- proof.state
- Proof of State. What the environment was, as of a date someone else picks: point-in-time records, content hashed and chained.
- proof.change
- Proof of Change. Who or what altered the environment, under what authority, with before and after state hashes.
- proof.agency
- Proof of Agency. What a machine was permitted to do before it acted, what it did, and what would have stopped it.
- architecture
- Architecture. How the chain is built and where the evidence is stored in each delivery mode.
- authorization
- Continuous ATO. How an authorizing official's decision is recorded with its package, and how the authorized system is checked against it every hour.
- baseline
- NIST SP 800-53. The Low, Moderate and High baselines as evidence, with the SSP, SAR and POA&M generated from one record.
Read the entries. Then verify the record they describe.