dod
Safeguard articles tagged "dod" — guides, analysis, and best practices for software supply chain and application security.
7 articles
CMMC 2.0 Phase Two: What November 10, 2026 Means for Contractors
CMMC Phase 1 began in November 2025. Phase 2 lands on November 10, 2026, requiring mandatory C3PAO Level 2 assessments. We unpack the contractor implications.
Defense Software Supply Chain Under the 2026 Federal Rules
CMMC 2.0, the FAR SBOM rule, and DoD Instruction 8500.01 have reshaped what software contractors must deliver. Here is the 2026 operational baseline for defense industrial base suppliers.
CMMC 2.0 Final Rule Preparation in 2026
The CMMC final rule took effect in December 2024 and rolling contract clauses began appearing in 2025. Here is what contractors should be doing right now in 2026.
Supply Chain Security for Aerospace & Defense (DoD) 2026
Supply chain security for aerospace and defense contractors in 2026 means CMMC 2.0 final rule, DFARS 7012/7020/7021, and NIST 800-171 Rev 3 in production.
Defense Contractor IL7 Deployment Walkthrough
An anonymized account of how a US defense prime deployed Safeguard in an IL7 classified environment supporting a DoD mission system.
US DoD Zero Trust: Software Dimensions
Where the DoD Zero Trust Reference Architecture meets the software supply chain, and what program offices are actually doing about it.
CMMC 2.0 and Software Supply Chain Security: A Practical Guide
CMMC 2.0 is reshaping defense contracting requirements. Here's how software supply chain security maps to the new maturity model.