Huntress and DEFCERT have partnered to release a set of compliance resources designed to simplify CMMC Level 2 assessment preparation for MSPs and their clients. The resources include a Shared Responsibility Matrix (SRM), Operations Plan, Interconnection Security Agreement, Baseline Configurations, and various checklists. Key problems addressed include asset categorization challenges, lack of NIST-friendly MSP documentation, and unclear responsibility boundaries between service providers and clients. A notable technical feature highlighted is Huntress's Sensitive Data Mode, which limits SOC analyst access to CUI file types, enabling Huntress to operate as a Security Protection Asset without requiring FedRAMP Moderate authorization.
