ComplianceScorecard

Tim Golden is speaking virtually today at RejectionCon 2026 on a topic that continues becoming more relevant for MSPs navigating cybersecurity, compliance, and operational accountability.

Shift Left: Proactive Cybersecurity Through Documentation-Driven Defense explores why documentation can no longer live separately from ex*****on. The environments that hold up best under pressure are the ones where controls, processes, and evidence are already connected before anyone starts asking questions.

Looking forward to the conversations coming out of this session and the full RejectionCon event.

Join the conversation; https://www.crowdcast.io/c/rejectioncon26

National Institute of Standards and Technology (NIST) just dropped SP 800-172r3.

Checkers is already on it. 🐾

This one matters. 800-172 is the enhanced tier the layer above 800-171 that CMMC Level 3 is built on. And r3 just went final.

What changed? Stronger alignment to SP 800-53r5. OSCAL data formatting. Companion assessment procedures dropping the same day.

What it means for your clients: the bar for protecting CUI just got higher. Not just documenting it. Demonstrating it.

Architecture. Segmentation. Asset visibility. Ongoing operational proof.

Compliance Scorecard is already mapping r3 into the platform and remains from the ground up.

More to come.

➡️ Read the release: https://csrc.nist.gov/News/2026/nist-releases-sp-800-172r3-and-sp-800-172ar3
➡️ See the platform: compliancescorecard.com/weekly-live-demo/



BE SURE TO TAG NIST