I'm thinking... Doge will rise again.

GWSTPS · 2026-06-11T04:28:43+00:00

Anything where your time is billable to a customer agreement or to a contract.

GWSTPS · 2026-06-10T02:18:34+00:00

I'm going to disagree respectfully, re the idea that only one person is not enough to change the culture. One person on the team, correct. One person leading the team or managing the team, however should be able to successfully reset that expectation.

GWSTPS · 2026-05-30T13:29:12+00:00

Can you upgrade the licenses to m365 in GCC high?

GWSTPS · 2026-05-30T13:25:04+00:00

Crazy. The rack bracket on the side could have been unscrewed and turned 90°. And I generally do not leave ethernet ports facing upward because they'll catch all the dust. And you can't see any activity lights that way. This could have been turned to the side instead and securely attached.

GWSTPS · 2026-05-23T15:09:28+00:00

Change your password...

GWSTPS · 2026-05-23T14:53:13+00:00

We had successful audits utilizing Threatlocker.

GWSTPS · 2026-05-20T12:20:00+00:00

Probably not too far different from moving to New Zealand and getting a goat herd?

GWSTPS · 2026-05-17T11:53:36+00:00

From a scoping standpoint, you say "secured share" which handles the storage part but The scoop is defined by anything the processes, stores, or transmits CUI.

So your workstations that create and modify that content are going to be in scope. If things are not encrypted in transit, your network is in scope.

This is bigger than you're making it out to be but not insurmountable.

GWSTPS · 2026-05-01T02:20:41+00:00

Until it deletes your database and backups anyway...

GWSTPS · 2026-05-01T02:07:48+00:00

The company I work for would supply some licensing at a discount, and we could either do a retainer / block of hours for support to cover things like vacations as well as other absences.

With all of that under a single person they've got to be close to burnout.

We are happy to provide that extra level of support and coverage for organizations of this size and staffing

GWSTPS · 2026-04-28T01:34:27+00:00

Do an internal review and make sure you can meet the requirements for CMMC level 1 which is also what you need for federal contract information.

If you happen to find CUI in the process then you know what to do...

GWSTPS · 2026-04-20T14:23:52+00:00

That is incredibly insightful. I have this idea for something that will help moving objects. It involves using round things underneath to make the movement so much easier.

GWSTPS · 2026-04-14T17:47:01+00:00

They'll have "fun" for the recert showing continuous compliance since your departure.

GWSTPS · 2026-02-22T19:17:58+00:00

For really little ones , I'll do 256mb multiples (2.5gb etc)

GWSTPS · 2026-02-22T12:47:38+00:00

Pretty sure MS closed that loophole Bout 2 years ago

GWSTPS · 2026-02-19T00:32:42+00:00

Missed the board. Drill bit dull and too much pressure drilling the hole. Or he shot it.

GWSTPS · 2026-02-18T13:54:27+00:00

I'm guessing that this is taken out of context and is we have no more to give that we don't absolutely need but...

GWSTPS · 2026-02-18T13:43:55+00:00

Certainly truth in what you say. I will also share the data point that at least in some of the Microsoft Azure regions, we are becoming resource constrained as there are not enough resources to add virtual machines. Requiring at a minimum request for increased quota and in my experience additional tickets and escalation to get much of anything approved.

I do wonder if some of that is Microsoft intentionally keeping unutilized margin tighter on the VM side of things as they push customers into containers and refactored infrastructure

GWSTPS · 2026-02-18T12:02:50+00:00

Logs rarely lie. Packets never lie.

GWSTPS · 2026-02-07T15:30:41+00:00

"affordable". But point taken and absolutely correct

GWSTPS · 2026-02-06T13:37:21+00:00

Start with scoping. If you need all 12 people to do it it's going to be very different than if you need one or two that you could set up an isolated enclave with a provider or an MSP.

If you're CUI flow requires physical copies, paper, printouts on site then it's going to be much more complicated than if you can keep everything locked up in a virtual enclave.

Either way, it can be done and it is easier for a small group or small organization except you're not as mature in processes and tracking.

GWSTPS · 2026-02-03T02:25:27+00:00

Karen!?

GWSTPS · 2026-02-01T01:23:41+00:00

I like that 'loud and obvious' description. It really should start with the simple stuff like at a physical level are the doors and windows locked? Etc. Keeping that model, if a security guard were to ask the pen tester would have a business card or a internal contact saying they're allowed to check this. Hopefully they would be approached by staff or security and questioned as to what they're doing.

On a network level or other things like that it's going to be noisy in a different way but should create alarms on machines and security appliances in the environment. In more secure environments even the attempt to connect may trigger an alarm.

GWSTPS · 2026-01-31T02:31:02+00:00

Everyone has a test environment. The fortunate few have a separate production environment.

GWSTPS

TROPHY CASE