CMMC Phase 2 Third-Party Assessments Are Suspended: Here's What Actually Changed
By Stacy Aitken, CEO on Jul 15, 2026
Here Is Why You Should Keep Your Compliance Roadmap On Track
Your Policies Are Only as Good as the Controls Behind Them
By Stacy Aitken, CEO on Jul 15, 2026
Policy & Procedure Writing for Real-World CMMC Compliance
What You Don't Know Can Cost You the Contract
By Stacy Aitken, CEO on Jun 11, 2026
The Case for a Gap Assessment Before Your Next Bid If your organization handles federal contract data and you haven't formally assessed your cybersecurity posture against NIST SP 800-171, there's a very good chance you have gaps you don't know about. And in today's contracting environ …
You're a Subcontractor. CMMC Is Now Your Problem Too.
By Stacy Aitken, CEO on May 13, 2026
The CMMC Flowdown Effect and What Small Vendors Must Do Right Now A lot of small and mid-size defense vendors are operating under a dangerous assumption: that CMMC is the prime contractor's problem. It isn't. And if you're still waiting to find out what your prime requires before you …
Regulatory Compliance & Human Error: Navigating the Human Factor in 2025's Evolving Cybersecurity Landscape
By Stacy Aitken, CEO on Jul 10, 2025
Building Defense-Grade Compliance While Minimizing Human Risk
RVAsec 14 Wrap-Up: A Phenomenal Success for the Cybersecurity Community
By EJ Phillips on Jun 11, 2025
Dragnet Team Is Proud To Have Been A Part Of Richmond's Premier Cyber Conference What an incredible two days at RVAsec 14! The Dragnet team was proud to be part of such a successful event that truly showcased the strength and innovation of the cybersecurity community across the mid-At …
Achieving CMMC Compliance Through Effective Policies and Procedures
By Stacy Aitken, CEO on Feb 28, 2025
.png)
Compliance with the Cybersecurity Maturity Model Certification (CMMC) is crucial for organizations engaged with the U.S. Department of Defense (DoD). The CMMC model requires not only the presence of policies but also the implementation of corresponding technical controls and supportin …
Why Every Business Needs an Incident Response Plan
By EJ Phillips on Jan 6, 2025
.png)
Lessons from a Snowstorm: Ensuring Business Continuity Amidst Unexpected Events Like much of the East Coast, Virginia just got blanketed with snow. As my kids geared up for an extended day of Winter Break, I went into action.
CMMC 2.0 Goes into Effect on December 16, 2024
By Stacy Aitken, CEO on Dec 10, 2024
.png)
The Cybersecurity Maturity Model, or CMMC, program has gone through some changes, but as we get closer to the rule being finalized, we wrote this short blog for anyone new to these requirements. You’ll learn about what the requirements are and what is coming down the pike.
Incident Response Plans
By Stacy Aitken, CEO on Nov 22, 2024
.png)
Ensuring Robust Cybersecurity Across Defense, Healthcare, Manufacturing, and Pharmaceutical Sectors Having a robust Incident Response Plan (IRP) is no longer optional—it's imperative. As a premier Managed Security Service Provider (MSSP), Dragnet’s mission is to deliver defense-grade …