Clark Schaefer

Insights

Featured

CMMC Requirements: Why Assessors Require Evidence, Not Just Policies
Phase II Is Paused. Your Obligations Aren't.

CMMC Requirements: Why Assessors Require Evidence, Not Just Policies

Carly Devlin
Carly Devlin, Shareholder, Chief Information Security Officer
How Does SOC Fit Into HIPAA, CMMC, and ISO 27001?
SOC Reports & Certifications

How Does SOC Fit Into HIPAA, CMMC, and ISO 27001?

Kourtney Nett
Amanda Hornung
2 Contributors

Popular

Is November 2026 a CMMC Level 2 Deadline? What Changes in Phase 2

Articles

How Manufacturers Can Use AI to Drive Operational Results

Articles

Independent HIPAA Risk Assessments for Healthcare Organizations

Articles

How a Media Company Built a Privacy Program Foundation in 6 Weeks

In six weeks, Clark Schaefer Consulting helped an organization go from fragmented, informal security practices to a fully documented program foundation.

Jul 24, 2026•Case Studies
How a Media Company Built a Privacy Program Foundation in 6 Weeks

E-Commerce & Manufacturing Firm Tackles GDPR and CCPA

In this case study Clark Schaefer Consulting stepped in with a hands-on advisory approach built on the NIST Privacy Framework to help a growing e-commerce and manufacturing company

Jul 22, 2026•Cybersecurity
E-Commerce & Manufacturing Firm Tackles GDPR and CCPA

SOC Reporting After an Acquisition: A Private Equity Firm Guide

Closing a deal surfaces the SOC Reporting issues you didn’t know you had and at exactly the wrong time to fix them.

2 Contributors
•Jul 17, 2026•SOC Reports & Certifications
SOC Reporting After an Acquisition: A Private Equity Firm Guide

How Does SOC Fit Into HIPAA, CMMC, and ISO 27001?

Clark Schaefer Consulting helps organizations integrate SOC examinations with their existing compliance obligations, including HIPAA, CMMC, ISO 27001, and others.

2 Contributors
•Jul 16, 2026•SOC Reports & Certifications
How Does SOC Fit Into HIPAA, CMMC, and ISO 27001?

Is November 2026 a CMMC Level 2 Deadline? What Changes in Phase 2

November 2026 marks the start of CMMC Phase 2, but it isn't a blanket deadline. Learn how CMMC Level 2 certification is tied to your specific contracts, not a universal date.

•Jul 9, 2026•Cybersecurity, Phase II Is Paused. Your Obligations Aren't.
Is November 2026 a CMMC Level 2 Deadline? What Changes in Phase 2

CMMC Requirements: Why Assessors Require Evidence, Not Just Policies

Regular internal reviews against the CMMC Assessment Process give organizations a realistic picture of where their evidence stands before an assessor does.

•Jul 8, 2026•Phase II Is Paused. Your Obligations Aren't.
CMMC Requirements: Why Assessors Require Evidence, Not Just Policies

Video Content

...
Get monthly insights critical to your business.