Compliance Pulse — 2026-10-01

Craig Wood

Published on: 01/10/2026

FAR 2021-017 and CIRCIA both missed September. CISA added a triage step; the Coast Guard paused plan filings and kept July 16, 2027. What still binds you.

CMMC compliance updatesNIST 800-171 compliancedefense contractor cybersecurity complianceCUI regulatory changesfederal contractor cybersecurityDFARS rulemaking updatesGRC practitioner resourcesDIB compliance news

Two Regulators Deferred, One Did Not — And the Security Obligation Never Moved At All

Craig Wood

Published on: 10/09/2026

DoD stripped CMMC third-party assessments from contracts on Sept 3. DoJ took $2M from Honeywell over 800-171 on Sept 1. What still binds you.

Compliance Pulse — 2026-04-02

Craig Wood

Published on: 02/04/2026

CMMC Phase 1 is live and DOJ is treating SPRS affirmations as federal representations. What defense contractors and subcontractors need to know before Phase 2 hits.

CMMC compliance updatesNIST 800-171 compliancedefense contractor cybersecurity complianceCUI regulatory changesFalse Claims Act cybersecurity enforcementSPRS score complianceDFARS 252.204-7012 compliancemaritime cybersecurity compliance

Compliance Pulse | Inaugural Edition

Craig Wood

Published on: 16/03/2026

Weekly compliance intelligence covering CMMC, NIST 800-171, DFARS, and CUI regulations for defense contractors, GRC teams, and maritime operators.

CMMC compliance updatesNIST 800-171 compliancedefense contractor cybersecurity complianceCUI regulatory changesDFARS rulemaking updatesGSAGRC practitioner resourcesmaritime cybersecurity complianceDIB compliance newsvCISO regulatory intelligencefederal contractor cybersecurityweekly CMMC compliance updates for defense contractorsNIST 800-171 enforcement newsmaritime MTSAcybersecurity regulatory updatesCUI compliance requirements for federal contractors