I have a basic understanding of CMMC, but I’m having trouble understanding what happened in the first place that caused the pause.
A few questions I have:
- What is the pause hoping to achieve?
- What are different schools of thought to solve the current problems?
- Is there any competitive advantage to having an C3PAO certification at this time despite the pause?
Thanks!
With an organization in commercial M365, but using PreVeil (all CUI to be handled there), does this control still need to be configured in Intune with a Defender Firewall policy?
I have been tasked with helping my small company to achieve CMMC level 2. We are using PreVeil, and are currently in Microsoft Commercial environment. Previously, we had CUI documents in our commercial system before PreVeil.
From my understanding - if we keep these documents within SharePoint or OneDrive, even if they are archived, we are non compliant.
My leadership has thousands of documents that are old CUI and scattered all throughout SharePoint, OneDrive, Email.
What would be the best approach to identifying the files that need to be moved? We have thought about eDiscovery, but nothing was previously labeled, so it would just search based on keywords.
What steps will I need to take to ensure that CUI files are successfully migrated to PreVeil?
Thank you for your help