https://blog.waypointca.com/categories/compliance/Recent content in Compliance on Waypoint Compliance Advisory | BlogHugo -- gohugo.ioen-usTue, 14 Apr 2026 00:00:00 +0000https://blog.waypointca.com/posts/hipaa-sra-mistakes/Tue, 14 Apr 2026 00:00:00 +0000https://blog.waypointca.com/posts/hipaa-sra-mistakes/Most security risk assessments fail on the same handful of gaps. We walk through the findings HHS OCR flags most often and how to close them before an audit.https://blog.waypointca.com/posts/florida-makers-cmmc-ot/Tue, 14 Apr 2026 00:00:00 +0000https://blog.waypointca.com/posts/florida-makers-cmmc-ot/Your CNC machines, PLCs, and IoT sensors are in scope. The question of whether g-code from a CUI drawing is itself CUI is one of the most contested questions in the CMMC manufacturing world. Here is the defense plan that holds regardless of which reading your assessor brought with them.https://blog.waypointca.com/posts/cmmc-level-2-small-business/Sat, 14 Mar 2026 00:00:00 +0000https://blog.waypointca.com/posts/cmmc-level-2-small-business/The final rule is live. Here is what small defense contractors need to know about scoping, POA&M timelines, and what assessors are actually looking for.