<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://www.plainaudit.com</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/privacy</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://www.plainaudit.com/terms</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>yearly</changefreq>
<priority>0.3</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/calculators/cmmc-readiness-quiz</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/calculators/soc2-gap-assessment</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/calculators/iso27001-documentation-kit</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/calculators/cmmc-l2-assessment-kit</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.8</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<priority>0.9</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/guides</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/guide/cmmc-level-2-requirements-explained</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/guide/sprs-score-explained</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/guide/cmmc-compliance-costs-small-business</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/soc2</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<priority>0.9</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/guides</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/guide/soc2-preparation-guide</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/guide/soc2-common-criteria-explained</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/guide/soc2-cost-and-timeline</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<priority>0.9</priority>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/guides</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/blog</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>weekly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/guide/mandatory-documents</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/guide/iso27001-vs-soc2</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/iso27001-docs/guide/certification-process</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-sprs-score-below-88-what-to-fix-first</loc>
<lastmod>2026-08-07T12:00:58.981Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-annual-affirmation-senior-official</loc>
<lastmod>2026-08-07T12:01:00.076Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/how-sprs-scoring-works-point-values</loc>
<lastmod>2026-04-23T21:03:59.895Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-trust-service-criteria-which-to-include</loc>
<lastmod>2026-04-24T12:00:59.617Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-readiness-assessment-checklist</loc>
<lastmod>2026-04-24T12:00:59.737Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-level-2-readiness-assessment-gaps</loc>
<lastmod>2026-04-13T19:39:13.577Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-audit-accountability-logging-mistakes</loc>
<lastmod>2026-08-07T12:00:59.973Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cui-vs-fci-which-cmmc-level</loc>
<lastmod>2026-04-26T12:01:28.827Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-gap-assessment-free-tool</loc>
<lastmod>2026-04-23T21:03:57.529Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-compliance-costs-small-business</loc>
<lastmod>2026-04-24T12:00:59.835Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-self-assessment-vs-readiness-assessment</loc>
<lastmod>2026-08-07T12:00:57.490Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-risk-assessment-vulnerability-scanning-requirements</loc>
<lastmod>2026-08-07T12:00:57.911Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-vs-iso-27001-control-overlap</loc>
<lastmod>2026-08-07T12:00:59.846Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-access-control-gaps-cc6-how-to-fix</loc>
<lastmod>2026-06-13T12:01:10.164Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/how-to-choose-soc2-auditor-questions-to-ask</loc>
<lastmod>2026-08-07T12:00:58.557Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-gap-analysis-step-by-step</loc>
<lastmod>2026-04-24T12:00:59.934Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-evidence-collection-what-auditors-look-for</loc>
<lastmod>2026-08-07T12:00:59.762Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-type-1-vs-type-2-first-audit</loc>
<lastmod>2026-04-29T12:00:56.873Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-audit-cost-small-company-breakdown</loc>
<lastmod>2026-05-02T12:00:59.924Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-self-assessment-vs-c3pao</loc>
<lastmod>2026-05-05T12:00:51.699Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-security-awareness-training-at-controls</loc>
<lastmod>2026-08-07T12:00:57.752Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-vs-iso-27001-which-to-get-first</loc>
<lastmod>2026-08-07T12:00:59.675Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/sprs-score-calculator-nist-800-171</loc>
<lastmod>2026-05-02T12:00:59.821Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-common-criteria-cc1-through-cc9-explained</loc>
<lastmod>2026-05-05T12:00:51.830Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-level-2-requirements-110-controls-checklist</loc>
<lastmod>2026-04-29T12:00:56.728Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-system-security-plan-ssp-template</loc>
<lastmod>2026-05-17T12:01:16.520Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-system-information-integrity-si-controls</loc>
<lastmod>2026-08-07T12:00:57.667Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/what-to-expect-cmmc-c3pao-assessment</loc>
<lastmod>2026-05-14T12:01:03.312Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-readiness-quiz-online-free-sprs-estimate</loc>
<lastmod>2026-05-21T12:01:11.049Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-level-1-vs-level-2-differences</loc>
<lastmod>2026-05-25T12:00:59.465Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-audit-preparation-checklist</loc>
<lastmod>2026-05-28T12:00:53.384Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/nist-800-171-rev2-vs-rev3-cmmc</loc>
<lastmod>2026-05-31T12:00:45.814Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-evidence-package-documentation-requirements</loc>
<lastmod>2026-06-08T12:00:45.838Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-for-subcontractors-small-defense</loc>
<lastmod>2026-05-18T12:01:03.913Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/how-long-does-cmmc-certification-take</loc>
<lastmod>2026-05-24T12:01:07.776Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-leverage-existing-iso-27001-overlap</loc>
<lastmod>2026-08-07T12:00:57.570Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-common-assessment-failures-difficult-controls</loc>
<lastmod>2026-06-11T12:01:06.511Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-poam-rules-180-days-88-point-minimum</loc>
<lastmod>2026-06-01T12:00:10.417Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-access-control-22-requirements-most-failures</loc>
<lastmod>2026-06-04T12:01:07.098Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-ssp-what-assessors-look-for</loc>
<lastmod>2026-08-07T12:00:59.234Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-scoping-enclave-strategy-cut-costs</loc>
<lastmod>2026-06-07T12:00:45.484Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-14-control-domains-explained</loc>
<lastmod>2026-08-07T12:01:00.640Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/dfars-7012-7021-cmmc-clause-explained</loc>
<lastmod>2026-08-07T12:01:00.719Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-myths-small-business-dod-contracts</loc>
<lastmod>2026-08-07T12:01:00.302Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-mfa-requirements-replay-resistant</loc>
<lastmod>2026-08-07T12:01:00.471Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-for-manufacturers-closing-the-gap</loc>
<lastmod>2026-08-07T12:01:00.144Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-gaps-auditors-find-first-audit</loc>
<lastmod>2026-06-11T12:01:06.251Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/how-to-submit-sprs-score-disa-portal</loc>
<lastmod>2026-08-07T12:00:57.028Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-phase-2-november-2026-plan</loc>
<lastmod>2026-08-07T12:00:59.304Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-timeline-2026-phase-2-enforcement</loc>
<lastmod>2026-05-11T12:01:04.178Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-what-automation-platforms-actually-automate</loc>
<lastmod>2026-08-07T12:00:57.419Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-physical-protection-pe-controls-remote-workers</loc>
<lastmod>2026-08-07T12:00:57.835Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-media-protection-cui-marking-sanitization</loc>
<lastmod>2026-08-07T12:00:57.987Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-flow-down-requirements-subcontractor-prime-contractor</loc>
<lastmod>2026-08-07T12:00:58.069Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-observation-period-when-to-start-how-long</loc>
<lastmod>2026-08-07T12:00:58.478Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-customer-responsibility-matrix-cloud</loc>
<lastmod>2026-08-07T12:00:59.378Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-msp-esp-assessment-scope</loc>
<lastmod>2026-08-07T12:00:59.078Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-incident-response-plan-requirements</loc>
<lastmod>2026-08-07T12:01:00.401Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-audit-timeline-month-by-month-first-type-ii</loc>
<lastmod>2026-08-07T12:00:58.715Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-configuration-management-cm-controls</loc>
<lastmod>2026-08-07T12:00:59.162Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-fips-encryption-requirements</loc>
<lastmod>2026-08-07T12:01:00.565Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/soc2-remediation-plan-prioritize-gaps-after-assessment</loc>
<lastmod>2026-08-07T12:00:58.394Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/fedramp-moderate-vs-equivalency-cloud-cui</loc>
<lastmod>2026-08-07T12:00:58.877Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/cmmc-network-segmentation-cui-enclave</loc>
<lastmod>2026-08-07T12:01:00.227Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.7</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/compliance-gap-assessment</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/sprs-scoring</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/remediation-planning</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/security-audit-preparation</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/affirmation</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cmmc-level2-nist-800-171</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/worked-example</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/readiness-assessment</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/audit-accountability</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/common-failures</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cui-classification</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/decision-guide</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/compliance-costs</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/iso-27001</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/framework-comparison</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/awareness-training</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/access-control</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/ssp-documentation</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/system-integrity</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/c3pao-assessment</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cmmc-level1</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/data-classification</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/c3pao</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/evidence-collection</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/nist-800-171</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/rev2-vs-rev3</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/defense-subcontractor</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/dfars-compliance</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cmmc-timeline</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/certification-roadmap</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/poam-rules</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/system-security-plan</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/assessment-readiness</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/scoping</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/enclave-strategy</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cui-boundary</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/manufacturing</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/phase-2-deadline</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/physical-protection</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/remote-work</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/shared-responsibility</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/cloud-security</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/cmmc/blog/tags/configuration-management</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/tags/soc2-trust-service-criteria</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/tags/compliance-gap-assessment</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
<url>
<loc>https://www.plainaudit.com/soc2/blog/tags/security-audit-preparation</loc>
<lastmod>2026-08-07T22:40:18.189Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.4</priority>
</url>
</urlset>
