IT for AEC firms: Autodesk licensing, large project files, field connectivity, and CMMC and NIST SP 800-171 requirements for firms on defense projects.
CMMC Level 2 requires MFA but not a specific method. How Windows Hello for Business, FIDO2 keys, and smart cards compare for AEC firms on defense work, and why MFA gaps cannot wait for a POA&M.
CMMC flow down requirements reach subcontractors at every tier. Here is which level each subconsultant needs, what a prime must confirm before award, and how the Phase 2 suspension changes it.
A year-end workstation refresh for architecture and engineering firms: Revit 2027 tiers, GPU needs for real-time rendering, whether an AI PC helps, security baselines, and wiping retired machines.
Your SPRS score has an expiration date. How the DFARS three-year rule and the CMMC annual affirmation work together, who signs, and what AEC firms on defense work should refresh before year-end.
CMMC Phase 2 is suspended, but C3PAO assessments are still available. How AEC firms on defense work can decide whether a voluntary certificate is worth booking now.
CMMC Phase 2 is paused, but NIST SP 800-171 Rev 2 still drives your SPRS score. How the scoring and POA&M rules decide which gaps design firms on DoD work should close first.
Autodesk seat reductions only take effect at renewal. Here is how design firms can use Autodesk Account usage reports to find idle named user seats, decide what to cut, and save the change before paying for another term.
CMMC Phase 2 was suspended in July, so C3PAO certification is not a condition of award. Here is what defense design firms still owe, and what to check this quarter.
One question to ask yourself
Does your IT provider show you proof without you having to ask?