u/thegreatcerebral

▲ 0 r/CMMC

Two-Pronged question about Vendors

I'm not sure how to frame this but we have two particular types of vendors at our facility out of the many that this question revolves around:

  1. Machine Vendor Direct Maintenance Technicians - Thing DMG MORI Technician
  2. Cleaning Crew/Janitorial Crew - Nightly cleaning company

My questions are:

  1. How do you handle these?
  2. Is there a way to have them become some sort of Authorized 3rd party by us?

Mostly my question is that, with the technician we have so many machines that the MORI technician is out at our place 2-3 times a month and can be here for 1-3 days or more each time depending on what is going on and revisits after ordering parts etc. We have an assigned technician who comes out every time unless he is out sick or on vacation. Is there a way that we can make that standard assigned technician authorized so that when he comes on site he does not need to be escorted around the property while he is here? The sign-in/out piece isn't a problem but when he is here for 8 hours/day or so for at least 5 days/month average it is a huge hassle to dedicate a babysitter to watch this person. We have cleaned the area and everything we can to the best of our ability to remove all CUI from the area he is working in. I cannot promise that because he is working on a machine that has gcode and through diagnostics if the machine shut down and we cannot get back in which is why he is out that he is kept from accessing that gcode but that's the nature of the beast there. We can and do clear the area of any CUI before he arrives.

My question with the cleaning crew is basically the same. We have a cleaning crew that comes nightly. They clean the office area etc. and I personally do not know the schedule but some nights I'm sure they clean MORE than some nights when I'm sure they just take out the trash. Is there a way that we can do similar with them where we can somehow authorize particular individuals at that company to be allowed to be here unescorted and do their thing?

reddit.com
u/thegreatcerebral — 17 hours ago

Anyone know what these were really?

Since they do not sell them anymore I am trying to locate that pick but without the dime stuff on it. It wasn't a show pick. They sold these back in the day. I am down to like 3 or 4 and if you look at the price on ebay for them... just don't.

Anyway I've tried the quite a few picks and off the top of my head I cannot remember which ones but Tortex and really anything I could grab from .77 to 1.05 or whatever the Hetfield White Fang picks are.

These are just my holy grail picks. I don't know why but they just are the sweet spot that I love. and the finish doesn't slide etc. etc. etc.

I'm hoping someone knows what they are really and I am able to find them. I have emailed Washburn in the past and they don't even know.

[update]

I have contacted Washburn and they said “we have no idea anything about those. Take some calipers and measure the thickness”

I contacted Dunlop and they said that they asked around and they did not make them and to contact Washburn.

I have reached out to Dime’s guitar tech and have not received a reply yet.

[/update]

[update 2]

I reached out to Dime's tech. He responded and told me that Dime used .88 Dunlop Tortex picks. He said that these were promotional things and they didn't have anything to do with them so he has no clue.

So, .88 Dunlop Tortex it is no matter what. lol.

[/update 2]

u/thegreatcerebral — 4 days ago

Ok I may be crazy here and it may already exist but maybe not I suppose. So I get that I can create whatever.domain.mine and then I can NPM with that whatever and point to [internal source] and do the proxy thing. For that to occur, not that it's a problem but I have to create a DNS record for each "thing" I am wanting to serve. I'm just wondering if there is a "portal" of sorts that one could host instead?

Don't get me wrong I know I can host Homarr and then just face that open and then create buttons for all the the things turning that into a portal but that would still require creating all the whatever.domain.mine DNS records and such.

Instead it would basically be like a NPM but a visual one that you would hit and then from there it handles the rest. "It" would know about the internal stuff and I would tell it what it is hosting but the person using would only need to know onething.domain.mine instead of one per "thing". I guess though it wouldn't work because then you wouldn't be able to say connect your jellyfin app on your Roku because it would block that unless it were smart enough to just know if it were fed a port to shoot that along?

Anyone dealt with wanting something like this? Honestly it doesn't bother me to setup everything up and enabling/disabling things in NPM is easy etc. etc. etc. it was just something I was thinking about when I was trying to figure out what to maybe host next.

reddit.com
u/thegreatcerebral — 24 days ago
▲ 16 r/CMMC

What I mean by that is, we are about to stand up our GCC High Tenant. Is there a checklist that I can go down from top to bottom of things to enable, disable, setup, define, etc. that when I reach the bottom I can cross-reference each task to a control etc.

For example (making up numbers for the sake of argument):

Conditional Access

  • Set locales to only allow countries you specify (3.8.2)
  • Enable MFA (3.1.1, 3.2.1)
  • Disable Legacy Authentication (3.1.1)

While also just having everything in sections so that if for example we do not want to use One Drive I would either go through the motions of settings for the sake of it being there but then disable anyway OR skip it etc.

Does such a beast exist?

reddit.com
u/thegreatcerebral — 28 days ago