<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>Muster — CMMC readiness insights &amp; product changelog</title>
  <id>https://passmuster.co/feed.xml</id>
  <link href="https://passmuster.co/feed.xml" rel="self" type="application/atom+xml"/>
  <link href="https://passmuster.co/"/>
  <updated>2026-07-13T00:00:00Z</updated>
  <author><name>Muster</name></author>
  <entry>
    <title>Content: CMMC Phase 2 suspended — the site now reflects it</title>
    <id>https://passmuster.co/changelog#2026-07-13-cmmc-phase-2-suspended-the-site-now-reflects-it</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-07-13T00:00:00Z</updated>
    <summary>DoD suspended CMMC Phase 2 (the third-party C3PAO assessment) on July 13, 2026 pending a 60-day review. We replaced the Phase 2 countdown with a plain regulatory-status callout and updated the CMMC status page and guides: the NIST 800-171 self-assessment and SPRS score requirement (DFARS 252.204-7012/7021) still applies, and a wrong self-assessed score is still a False Claims Act risk.</summary>
  </entry>
  <entry>
    <title>Conditional CMMC Level 2: can you get certified with open gaps?</title>
    <id>https://passmuster.co/insights/cmmc-conditional-certification</id>
    <link href="https://passmuster.co/insights/cmmc-conditional-certification"/>
    <updated>2026-06-28T00:00:00Z</updated>
    <summary>Yes — most contractors will certify with some requirements still on a Plan of Action &amp; Milestones. Here is the 88-point minimum, the requirements you can never defer, and the 180-day clock.</summary>
  </entry>
  <entry>
    <title>Improved: Muster is now a machine-readable entity for AI assistants</title>
    <id>https://passmuster.co/changelog#2026-06-24-muster-is-now-a-machine-readable-entity-for-ai-assistants</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-24T00:00:00Z</updated>
    <summary>The site now publishes a canonical organization and website identity as structured data, so AI search engines can reliably recognize Muster — and attribute every guide to one source — when answering “what is Muster?” or “who makes this?”. No fabricated social profiles; only what is already public.</summary>
  </entry>
  <entry>
    <title>Content: The 110-control explorer is now machine-readable</title>
    <id>https://passmuster.co/changelog#2026-06-22-the-110-control-explorer-is-now-machine-readable</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-22T00:00:00Z</updated>
    <summary>The CMMC Level 2 requirements explorer publishes its full control set — and the list of 5-point controls — as structured data, so AI assistants can cite the exact SPRS weighting instead of guessing.</summary>
  </entry>
  <entry>
    <title>Improved: Step-by-step SPRS calculation guidance</title>
    <id>https://passmuster.co/changelog#2026-06-16-step-by-step-sprs-calculation-guidance</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-16T00:00:00Z</updated>
    <summary>The free SPRS calculator now spells out how the score is computed — start at 110, deduct 5/3/1 per unmet requirement, apply the two partial-credit cases, and confirm the 3.12.4 SSP gate.</summary>
  </entry>
  <entry>
    <title>New: “Was this useful?” feedback on results and drafts</title>
    <id>https://passmuster.co/changelog#2026-06-13-was-this-useful-feedback-on-results-and-drafts</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-13T00:00:00Z</updated>
    <summary>A one-tap rating on your results and document drafts, with an optional note for what’s missing. Like everything else, it stays in your browser and screens free text for CUI before you send it.</summary>
  </entry>
  <entry>
    <title>New: Word (.doc) export for SSP and POA&amp;M drafts</title>
    <id>https://passmuster.co/changelog#2026-06-11-word-doc-export-for-ssp-and-poa-m-drafts</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>Download your draft System Security Plan and POA&amp;M as Word documents, not just Markdown — assessors live in Word. The free Markdown export stays.</summary>
  </entry>
  <entry>
    <title>Improved: A keyboard-first, WCAG 2.1 AA assessment</title>
    <id>https://passmuster.co/changelog#2026-06-11-a-keyboard-first-wcag-2-1-aa-assessment</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>The full assessment is fully keyboard-navigable, with a skip-to-content link, an announced progress bar, and color-contrast fixes across the critical path.</summary>
  </entry>
  <entry>
    <title>New: Free interactive SPRS score calculator</title>
    <id>https://passmuster.co/changelog#2026-06-11-free-interactive-sprs-score-calculator</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>Check off the NIST SP 800-171 requirements you haven’t met and watch the deductions land in real time — no signup, scores from 110 down to a −203 floor.</summary>
  </entry>
  <entry>
    <title>New: CMMC Phase 2 countdown</title>
    <id>https://passmuster.co/changelog#2026-06-11-cmmc-phase-2-countdown</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>A live countdown to November 10, 2026, with the honest per-solicitation rollout detail — Phase 2 is a rollout through 2028, not a single cliff — and the full phase table.</summary>
  </entry>
  <entry>
    <title>New: White-label partner program</title>
    <id>https://passmuster.co/changelog#2026-06-11-white-label-partner-program</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>RPOs, MSPs, and consultants can now run the Muster CMMC readiness engine under their own brand. Founding-partner terms for the first 25 firms.</summary>
  </entry>
  <entry>
    <title>Content: A growing hub of plain-English CMMC guides</title>
    <id>https://passmuster.co/changelog#2026-06-11-a-growing-hub-of-plain-english-cmmc-guides</id>
    <link href="https://passmuster.co/changelog"/>
    <updated>2026-06-11T00:00:00Z</updated>
    <summary>Free, primary-source guides for defense contractors: SSP and POA&amp;M templates, honest Level 2 cost benchmarks, and Level 1 vs Level 2 decision help — new guides ship regularly.</summary>
  </entry>
  <entry>
    <title>CMMC Phase 2 readiness — a 90-day plan (updated: Phase 2 now suspended pending review)</title>
    <id>https://passmuster.co/insights/cmmc-phase-2-90-day-plan</id>
    <link href="https://passmuster.co/insights/cmmc-phase-2-90-day-plan"/>
    <updated>2026-06-10T00:00:00Z</updated>
    <summary>Phase 1 self-assessment rules have appeared in DoD solicitations since November 2025. DoD suspended the Phase 2 C3PAO requirement on July 13, 2026 pending a 60-day review — the self-assessment and SPRS score requirement is unchanged.</summary>
  </entry>
  <entry>
    <title>Your SPRS score is a False Claims Act exposure, not a checkbox</title>
    <id>https://passmuster.co/insights/sprs-score-false-claims-act</id>
    <link href="https://passmuster.co/insights/sprs-score-false-claims-act"/>
    <updated>2026-06-03T00:00:00Z</updated>
    <summary>A self-assessed SPRS score is a representation to the government — and the DOJ’s Civil Cyber-Fraud Initiative makes an inaccurate one a False Claims Act risk.</summary>
  </entry>
  <entry>
    <title>What a prime actually sees when they check your SPRS score</title>
    <id>https://passmuster.co/insights/what-contracting-officers-see-sprs</id>
    <link href="https://passmuster.co/insights/what-contracting-officers-see-sprs"/>
    <updated>2026-05-27T00:00:00Z</updated>
    <summary>Primes cannot look your SPRS score up themselves — but they are required to confirm you have a current one. Here is how it shows up on the buyer side.</summary>
  </entry>
</feed>
