CMMC Level 1 vs Level 2 in 2027: what applies now Phase 2 is suspended
CMMC is paused in Phase 1. What Level 1 and Level 2 require of defence contractors and their software and IT subcontractors, how SPRS fits, and when a C3PAO still makes sense.
Topic
Data residency, security tooling and regulatory APIs, and the gaps that matter.
CMMC is paused in Phase 1. What Level 1 and Level 2 require of defence contractors and their software and IT subcontractors, how SPRS fits, and when a C3PAO still makes sense.
FedRAMP plans to close new Rev5 applications on 11 June 2027. What 20x Class A, B and C ask of a SaaS vendor, how they compare with Rev5, and when to start.
Higher Companies Act size limits change who runs IR35 from 6 April 2027. Which UK clients flip to small, why the year-end decides it, and checklists for clients and agencies.
Who joins Making Tax Digital for Income Tax on 6 April 2027, how qualifying income works, the 2027-28 deadlines, the Budget 2026 penalty easement and what MTD software must support.
The DSPT 2026-27 deadline is 30 June 2027. What NHS IT and software suppliers must evidence for the 12 audited assertions, plus new product rules and a month-by-month plan.
HMRC's 9 November 2026 guidance sets which benefits move onto the FPS from 6 April 2027, what stays on the P11D, and the payroll and HR data changes to make first.
Domestic software development is deductible in the year paid under Section 174A; foreign R&E is amortised over 15 years under Section 174. The statute, IRS guidance and a worked example in USD.
The UK cryptoasset regime starts on 25 October 2027. Apply to the FCA by 28 February 2027 to keep trading, and build custody, stablecoin, surveillance and reporting systems now.
The Cyber Security and Resilience Bill puts medium and large MSPs under the Information Commission and 1MW+ data centres under Ofcom. Status, duties, fines and what to prepare now.
The 28 October 2026 roadmap fixes 1 April 2029 for UK e-invoicing on Peppol. What is decided, what is not, and what finance and ERP teams should do before the spring 2027 consultations.
The Employment Rights Act 2025 hits HR and payroll systems in seven months of 2027. Which dates are law, which are plans, and the fields, workflows and payroll rules to change.
What six-month unfair dismissal rights and uncapped awards mean for hiring developers in Great Britain: ONS pay, employer costs, probation design and the contractor or offshore choice.
A step-by-step guide to private limited company registration in India through SPICe+: DSCs, documents, MCA fees, stamp duty, timelines, INC-20A and LLP vs OPC.
Cloudflare Artifacts gained data localization on 13 August 2026 with two jurisdictions, eu and us. A repo pushed to an unknown namespace auto-creates that namespace, unrestricted and immutable.
Cloudflare shipped CASB remediation policies on 21 August 2026. They revoke Microsoft 365 and Google Workspace file shares with no human in the loop, but CASB scans run every 24-48 hours.
The FCA launched a free Handbook API on 6 August 2026 and named rule-change tracking as a benefit. Its own FAQ says past versions are unavailable and a past-date query returns an error.