# Darron Makrokanis

Darron Makrokanis shares and promotes work on defense cybersecurity, especially CMMC compliance and supply-chain readiness for defense contractors and their suppliers.

- Profile: https://b2binfluencer.marketing/creators/darron-makrokanis/
- LinkedIn: https://www.linkedin.com/in/darronmakrokanis
- LinkedIn followers: 8,489
- Topics: supply-chain, cybersecurity, defense-industrial-base
- Based on 16 dated posts, latest 2026-10-09

## Summary

Most useful for explaining CMMC and supply-chain compliance pressure on defense contractors and small suppliers.

- Best for: Defense cybersecurity compliance firm seeking content collaboration on CMMC and supply-chain readiness.
- Not for: General commercial software or HR brands seeking non-defense mid-market buyers and product demo videos.
- Check first: Ask for sponsorship formats, rates, deliverables, inquiry route, and audience analytics beyond LinkedIn follower count.

### Takeaways

- CMMC and NIST SP 800-171 costs are framed as a small-business barrier.
- Prime contractor updates push compliance requirements to subcontractors on tight schedules.
- More than 100 clients reached CMMC Level 2 assessment certification.

## Main ideas

- **Compliance cost, not capability, shuts small suppliers out of defense work**: The recurring argument is that NIST SP 800-171 and CMMC create a price barrier that pushes very small defense suppliers out of the industrial base. Firms with a handful of employees cannot absorb the cost of building a compliant environment, leaving their capabilities unavailable to the military instead of allowing their risks to be managed. The proposed response is not to lower the requirements, but to make compliance affordable through shared enclave environments and low-cost products for small subcontractors.
- **Pressure from prime contractors is a useful forcing function**: Makrokanis treats prime contractors' efforts to push compliance down to suppliers as a positive development, not an unreasonable burden. Primes control contract awards, so their deadlines and surveys can move small suppliers to act. This view complements the cost-barrier argument: primes provide the urgency, while programs and products offer an affordable route.
- **Policy change should be assessed for its cost to contractors—and questioned**: Makrokanis regularly translates regulatory news into consequences for contractors, then questions whether the policy makes sense. They describe the stated rationale, add spending or burden data, and ask whether a change improves assurance or merely shifts costs. Their tone toward government policy is questioning rather than approving.
- **Civilian infrastructure is an overlooked part of defense cybersecurity**: A distinct line of argument extends beyond contractor certification: military operations depend on ports, railroads, and utilities, and those civilian systems are exposed to state-backed cyberattacks. Attention and protection spending concentrate on government and defense industrial base networks, leaving civilian infrastructure the military relies on exposed. This is Makrokanis's clearest authored argument, rather than a promotion of company news.
- **Delivery is measured in certified clients**: Progress in this practice area is measured by the number of organizations that have completed certification, with the company's history and platform partnerships offered as evidence of its experience. The count serves as a public scoreboard for hands-on implementation, rather than advisory-only work.
- **The message travels through recurring channels and live events**: The ideas reach audiences through a regular publishing and events schedule: a weekly newsletter, linked blog posts, and in-person gatherings that bring primes and small suppliers together. The events also serve as product announcements, combining audience-building with commercial offerings.

## Work to read

- [US Army NCODE selection and the small-business CMMC cost barrier](https://www.linkedin.com/posts/darronmakrokanis_us-army-awards-summit-7-ncode-contract-activity-7457917369252962304-3Jrg)
- [Milestone: 100 clients reach CMMC Level 2 certification](https://www.linkedin.com/posts/darronmakrokanis_cmmc-activity-7458554464472539136-_kwL)
- [CMMC pause, cost concerns, and the 'Brilliant at the Basics' campaign](https://www.linkedin.com/posts/darronmakrokanis_dod-paused-cmmc-over-costs-get-ready-to-activity-7498891133066969088-fY47)
- [Civilian infrastructure risk to US military operations](https://www.linkedin.com/posts/darronmakrokanis_americas-cyber-strategy-overlooks-the-infrastructure-activity-7506501355432366080-_njr)
- [Prime pressure: Parsons CMMC supply-chain update](https://www.linkedin.com/posts/darronmakrokanis_cmmc-activity-7430639910035914752-OmTS)
- [L3Harris 80-working-day subcontractor notice](https://www.linkedin.com/posts/darronmakrokanis_l3harris-gives-subcontractors-about-80-working-activity-7452767074898276352-jE7r)
- [AUSA 2026 supply-chain readiness reception and small-business solution](https://www.linkedin.com/posts/darronmakrokanis_ausa-supply-chain-cyber-readiness-preview-activity-7514415544184270848-_CHY)
- [Summit 7 Live Boston event promotion](https://www.linkedin.com/posts/darronmakrokanis_summit-7-live-boston-activity-7501295380333223936-CNmf)
- [Weekly cybersecurity newsletter refresh](https://www.linkedin.com/posts/darronmakrokanis_subscribe-to-blog-activity-7511457991846457344-nan7)

## Brand relationships

- **Summit 7** (disclosed_partnership)
- **CyberScoop** (mention)

## Partnerships

The nine posts do not describe a sponsored-content, affiliate, or paid-partnership format. They show company-led activity around Summit 7: a Summit 7 Live event in Boston on September 16, 2026; an AUSA supply-chain readiness reception and a new low-cost compliance product for small suppliers; a weekly newsletter published Fridays at 8 AM ET; a blog covering CMMC deadlines and contractor guidance; and milestone and policy posts about CMMC certification and Department of War decisions. Treat this as event, content, and product communication—not a published creator advertising offer. The posts list no sponsorship terms, rates, deliverables, or approval requirements. Before planning a collaboration, ask for the partnership policy or media kit, available formats, rates, and the right contact.

## Alternatives

- Keith Mayfield: A better choice for a collaboration aimed at cloud service providers and independent software vendors selling into federal and defense markets, rather than small subcontractors preparing for a CMMC assessment. Mayfield makes a narrower, sharper argument: cloud companies handling controlled unclassified information need FedRAMP Moderate authorization or an equivalent, and the process can take 12 to 18 months, making it too late to wait for an enforcement deadline. The second post frames FedRAMP certification as a hard eligibility gate, not a feature advantage: agencies pre-screen for authorized vendors, and certification can disqualify rivals before an RFP is issued. For a brand helping cloud products get through FedRAMP, Mayfield is closer to the buying decision than Makrokanis's supply-chain and small-business framing.
- Thomas Ward: A better choice for a collaboration focused on advisory services and the uncertainty created by the suspension of CMMC Phase 2. Ward answers contractors' immediate questions—whether to stop preparing or cancel an assessment—with a clear no: organizations handling controlled unclassified information still have contractual obligations. The post lists concrete next steps, including maturing NIST SP 800-171 controls, remediating gaps, writing policies that work day to day, and preparing System Security Plans and POA&Ms. It also names gap assessments and fractional CISO support as offers. The complimentary one-hour strategy call provides a measurable lead-capture step for a campaign. Ward also states more than 26 years in enterprise IT, cybersecurity, and compliance leadership.
- Michael McLaughlin: A better choice for a brand seeking policy argument backed by numbers and a willingness to contest the Department of War's decision to suspend CMMC Phase 2. The post works through Cyber AB town-hall figures showing monthly Level 2 certifications rising from 123 to 279, argues that the assessor shortage does not hold up, distinguishes the cost of implementing DFARS 252.204-7012 from the cost of a CMMC assessment, and points to the Army's N-CODE program as a way to maintain verification while helping small businesses. The second post broadens the discussion to AI training data and national security, arguing for a training data bill of materials on systems touching defense and critical infrastructure. A brand campaigning on the policy debate or on AI and data provenance in defense gets a stronger argumentative partner here.

---
AI-assisted summary of public posts. Audience demographics are not available. Engagement appears only where we checked recent posts. Method: https://b2binfluencer.marketing/methodology/