Perspectives on cybersecurity, compliance, AI, and modernization for federal and state government missions.
05OCT
DFARS 252.240-7997 is the revised clause that replaces DFARS 252.204-7020 under the 2026 Revolutionary FAR Overhaul. Contractors should understand what changed, which obligations remain active, and what to review in thei
Read more...
02OCT
Federal agency AI use cases are rapidly transforming how government teams manage governance, risk, and compliance. From automating evidence collection to identifying risks earlier, AI is helping agencies improve visibili
Read more...
28SEP
The CMMC Reform Task Force report has not been published. It was delivered to the Department of War Chief Information Officer on or about September 11th, 2026, at the end of the 60-day review that began with the suspensi
Read more...
24SEP
AI in GRC for federal agencies is shifting compliance from manual evidence collection to continuous, verifiable control monitoring. Artificial Intelligence · Governance, Risk and Compliance · By KSG Team &m
Read more...
21SEP
Cybersecurity · By KSG Team · September 2026 Who needs CMMC Level 2*? Since the Department of War (DoW) suspended CMMC Phase 2 on July 13th, 2026, two questions have dominated conversations across the Defense Industrial B
Read more...
18SEP
Governance Risk and Compliance is essential for federal agencies, as annual point-in-time audits no longer provide sufficient real-time visibility. Weeks of evidence gathering, screenshots, spreadsheets, and sign-offs, a
Read more...
14SEP
I’ve had the same conversation four times this month with a few of our clients. A senior executive from a client called me up recently, relieved, and sayings, “So we’re off the hook on CMMC, right? I saw it got suspended
Read more...
05SEP
CMMC Level 2* Suspension: that is the headline many defense contractors have seen this summer, but CMMC is not dead. On July 13, 2026, the Department of War suspended Phase 2 of the Cybersecurity Maturity Model Certificat
Read more...
25JUN
Learn how federal cybersecurity programs protect government systems, manage cyber risks, strengthen compliance, and support mission-critical operations in 2026.
Read more...
18JUN
Strategy & Governance The ISSO Playbook: Keeping Federal Systems Audit-Ready TR Posted by Tahmeed Rab May 18, 2026 4 min read The Information System Security Officer (ISSO) sits at the intersection of engineering, compliance, and risk.
Read more...
18JUN
Risk Management Building Meaningful KRIs and KPIs for Cyber Risk KSG Posted by KSG Team May 14, 2026 4 min read Ask a security team for metrics and you often get a wall of numbers: alerts triaged, attacks blocked, patches applied. These are
Read more...
18JUN
Emerging Tech Governed AI: Putting Copilot to Work Securely in Government TR Posted by Tahmeed Rab June 18, 2026 7 min read Agencies want AI's speed. Security teams fear the exposure. The way through isn't a better chatbot - it's refusing t
Read more...
18JUN
Risk Management C-SCRM: Managing the Risk You Inherit From Your Supply Chain SM Posted by Shariff Mohsin May 21, 2026 4 min read No agency operates alone. Every system depends on vendors, software components, managed services, and cloud pla
Read more...
18JUN
Compliance Reaching CMMC Level 2*: A Practical Assessment-Readiness Roadmap SM Posted by Shariff Mohsin June 16, 2026 8 min read Mandatory third-party assessments arrive in DoD contracts on November 10, 2026 . Here is the six-step path from
Read more...* The Department of War is currently reviewing the requirements for CMMC Level 2, and will provide an update by October 2026.
