Darron Makrokanis shares and promotes work on defense cybersecurity, especially CMMC compliance and supply-chain readiness for defense contractors and their suppliers.
Most useful for explaining CMMC and supply-chain compliance pressure on defense contractors and small suppliers.
Best for
Defense cybersecurity compliance firm seeking content collaboration on CMMC and supply-chain readiness.
Not for
General commercial software or HR brands seeking non-defense mid-market buyers and product demo videos.
Key takeaways
CMMC and NIST SP 800-171 costs are framed as a small-business barrier.
Prime contractor updates push compliance requirements to subcontractors on tight schedules.
More than 100 clients reached CMMC Level 2 assessment certification.
Check first: Ask for sponsorship formats, rates, deliverables, inquiry route, and audience analytics beyond LinkedIn follower count.
Main ideas
Compliance cost, not capability, shuts small suppliers out of defense work · Pressure from prime contractors is a useful forcing function · Policy change should be assessed for its cost to contractors—and questioned
Audience
8,489 LinkedIn followers · Weekly, Friday 8 AM Newsletter cadence
Darron Makrokanis shares and promotes work on defense cybersecurity, with a particular focus on CMMC compliance and the readiness of small suppliers in the defense industrial base.
The posts show them connecting policy changes and prime-contractor requirements to practical pressures on smaller businesses: compliance costs, short deadlines, and the risk of suppliers being shut out.
They also point beyond CMMC to the security of civilian infrastructure that supports military operations.
If evaluating their broader body of work, ask for examples of a signature book, show, or earlier projects.
The clearest strength in these posts is translating defense-cybersecurity developments into supply-chain consequences.
For example, the NCODE post frames CMMC and NIST SP 800-171 costs as a barrier for businesses with 2–10 employees, while posts about prime-contractor updates and an 80-working-day notice show how requirements can reach subcontractors on tight schedules.
The CMMC pause post adds a policy tension: costs and burdens prompted a pause, yet broader cybersecurity expectations may continue to grow.
Together, these examples give readers a concrete way to follow how compliance policy affects smaller suppliers—not just what a rule says.
The posts also show a wider national-security interest in ports, railroads, and utilities that support military operations.
The evidence comes mainly from short LinkedIn posts promoting Summit 7 material, events, and services.
For a fuller assessment, ask to review the linked articles or programs.
Darron Makrokanis posts about defense cybersecurity compliance, mostly through Summit 7 material: CMMC and NIST SP 800-171 requirements, the costs those requirements impose on small subcontractors, and the pressure prime contractors put on suppliers.
Read more
The recurring position is that compliance is necessary for the defense industrial base but priced out of reach for very small firms, so the solution is cheaper paths to compliance, not weaker expectations.
Makrokanis also writes about civilian infrastructure, arguing that ports, railroads, and utilities are overlooked parts of defense cybersecurity.
Posts often end with a question, and the channel mix includes announcements, events, a weekly newsletter, and blog links.
Compliance cost, not capability, shuts small suppliers out of defense work
The recurring argument is that NIST SP 800-171 and CMMC create a price barrier that pushes very small defense suppliers out of the industrial base.
Read more
Firms with a handful of employees cannot absorb the cost of building a compliant environment, leaving their capabilities unavailable to the military instead of allowing their risks to be managed. The proposed response is not to lower the requirements, but to make compliance affordable through shared enclave environments and low-cost products for small subcontractors.
A post announces Summit 7's selection as one of eight companies in the US Army's NCODE program.
It describes NCODE as the Army's answer to the price barrier facing businesses with 2 to 10 employees, with a pilot starting May 15 and the main program expected within six months.
The post quotes Summit 7 CEO Scott Edwards saying the enclave environment keeps the most innovative but vulnerable suppliers from being shut out of the defense industrial base.
A later post previews a soft-launched product for contractors with fewer than 25 employees, designed to remove the cost barrier and give primes visibility into supplier status.
Pressure from prime contractors is a useful forcing function
Makrokanis treats prime contractors' efforts to push compliance down to suppliers as a positive development, not an unreasonable burden.
Read more
Primes control contract awards, so their deadlines and surveys can move small suppliers to act. This view complements the cost-barrier argument: primes provide the urgency, while programs and products offer an affordable route.
A post welcomes pressure from primes to secure supply chains and points to Parsons Corporation's CMMC supply-chain update dated March 3, urging recipients to complete its survey.
Another covers a Summit 7 blog about L3Harris Technologies giving subcontractors about 80 working days to meet CMMC requirements and offering help to affected companies.
A third tells large primes their subs must be compliant before the next contract and pitches visibility into subcontractor status.
Policy change should be assessed for its cost to contractors—and questioned
Makrokanis regularly translates regulatory news into consequences for contractors, then questions whether the policy makes sense.
Read more
They describe the stated rationale, add spending or burden data, and ask whether a change improves assurance or merely shifts costs. Their tone toward government policy is questioning rather than approving.
A post notes that DoW suspended CMMC Phase 2 over costs and the burden on small businesses, while still expecting contractors to adopt broader, potentially more expensive practices.
It outlines the 'Brilliant at the Basics' campaign, the push for phishing-resistant multi-factor authentication and stronger operational technology security, and NDIA data on contractors' current spending on NIST SP 800-171 and how many lack the resources to keep up.
It asks whether the CMMC review will lead to a costlier baseline with even less assurance that it is being implemented.
Civilian infrastructure is an overlooked part of defense cybersecurity
A distinct line of argument extends beyond contractor certification: military operations depend on ports, railroads, and utilities, and those civilian systems are exposed to state-backed cyberattacks.
Read more
Attention and protection spending concentrate on government and defense industrial base networks, leaving civilian infrastructure the military relies on exposed. This is Makrokanis's clearest authored argument, rather than a promotion of company news.
A post thanks CyberScoop for covering an article arguing that ports, railroads, and utilities that keep the military operational are vulnerable to Iranian cyberattacks. It points readers to the full article and tags the NIST SP 800-53 framework.
Progress in this practice area is measured by the number of organizations that have completed certification, with the company's history and platform partnerships offered as evidence of its experience.
Read more
The count serves as a public scoreboard for hands-on implementation, rather than advisory-only work.
A milestone post marks Summit 7 helping more than 100 clients receive CMMC Level 2 assessment certification. It quotes Summit 7 CEO Scott Edwards describing the company's work since 2016 to implement secure infrastructure and prepare clients for certification, and thanks Microsoft for its partnership.
The message travels through recurring channels and live events
The ideas reach audiences through a regular publishing and events schedule: a weekly newsletter, linked blog posts, and in-person gatherings that bring primes and small suppliers together.
Read more
The events also serve as product announcements, combining audience-building with commercial offerings.
A post announces a refreshed weekly newsletter, dropping every Friday at 8 AM, with short updates on threats and industry changes.
Event posts promote Summit 7 Live in Boston on September 16, 2026, focused on defense cybersecurity, and an AUSA 2026 supply chain readiness reception at the Henley Park Hotel, followed by a happy hour.
A schedule update moves the reception to 4:00 PM ET.
The AUSA post also says the event will unveil a new cost-effective solution for small suppliers, linking the event to the cost-barrier argument.
Shows what defense-cybersecurity problem Makrokanis is trying to solve and why newcomers should understand the cost barrier CMMC creates for very small suppliers.
Read more
The post says Summit 7 was one of eight companies selected for the US Army's NCODE program, which is described as helping small businesses with 2–10 employees overcome CMMC and NIST SP 800-171 cost barriers.
It quotes Scott Edwards, CEO of Summit 7, saying the program aims to keep innovative but vulnerable suppliers from being shut out of the defense industrial base.
The pilot is set to begin May 15, with the main program expected within six months.
For brands planning a campaign
A collaboration on CMMC and supply-chain readiness could focus on the practical cost problem facing small subcontractors, rather than offer a general explainer. The NCODE angle brings a specific program, a clear audience and a named executive voice.
Shows the hands-on CMMC implementation experience behind the posts.
Read more
For newcomers, it offers a quick look at the claimed track record and partner ecosystem.
The post celebrates more than 100 clients receiving CMMC Level 2 assessment certification. It quotes Scott Edwards saying the company has worked since 2016 to implement secure infrastructure and prepare clients for certification, and thanks Microsoft for its partnership.
For brands planning a campaign
This proof-point post could support a practical CMMC readiness series built around the 100-client milestone, with the Microsoft partnership as a secondary thread rather than the main claim.
Shows the policy tension facing contractors and how Makrokanis connects a CMMC pause to broader cybersecurity expectations—useful context for understanding the current debate.
Read more
The post says the Department of War suspended CMMC Phase 2 over cost and burden on small businesses, while still expecting contractors to adopt broader and potentially more expensive cybersecurity practices.
It outlines the 'Brilliant at the Basics' campaign, phishing-resistant MFA, stronger operational technology security, and NDIA data on NIST SP 800-171 spending.
It asks whether the CMMC review will produce a costlier baseline with less assurance.
For brands planning a campaign
This timely policy commentary could spark discussion with compliance and supply-chain audiences about the whiplash contractors face: CMMC is on pause, while other cybersecurity expectations are rising.
Shows how Makrokanis's interests extend beyond CMMC, connecting compliance content to national-security risks involving ports, railroads, and utilities.
Read more
The post thanks CyberScoop for picking up an article and argues that ports, railroads, and utilities supporting US military operations are vulnerable to Iranian cyberattacks. It says the article examines gaps in civilian infrastructure and what needs to change, with hashtags including NIST 800-53.
For brands planning a campaign
A thought-leadership collaboration could broaden the conversation from CMMC to infrastructure resilience and national-security dependencies. Link to the full CyberScoop article before using it.
Shows how prime contractors push CMMC requirements down to suppliers, illustrating the pressure smaller defense businesses face.
Read more
The post welcomes pressure from primes to secure supply chains and points to Parsons Corporation's CMMC supply-chain update dated March 3rd, urging recipients to submit their survey.
For brands planning a campaign
This could support a campaign about prime-driven compliance deadlines and supplier readiness. Ask for the exact Parsons requirements before using the post as a guide; it illustrates the pressure, not the full specification.
Shows how short compliance windows can be, with a specific deadline that makes the urgency of supply-chain readiness clear to subcontractors.
Read more
The post points to a Summit 7 blog about L3Harris Technologies giving subcontractors about 80 working days to meet CMMC compliance, and offers help to companies affected by the notice.
For brands planning a campaign
This offers a timely hook for content on subcontractor readiness. A collaboration could pair the 80-day example with practical steps; ask for the full blog and L3Harris notice before citing their details.
The post shows how Makrokanis reaches the defense industrial base in person and promotes a product for small suppliers, offering a view into their audience and event strategy.
Read more
The post invites large primes and small defense contractors to an AUSA reception on Tuesday, October 13, at the Henley Park Hotel.
Summit 7 will unveil a cost-effective product for small contractors with fewer than 25 employees, designed to improve supply-chain visibility and collaboration.
The post also mentions a happy hour at The Wilkes and Blue Bar and includes a registration link.
For brands planning a campaign
An event-based collaboration could connect CMMC readiness content to the AUSA audience and the focus on small suppliers. Ask for evidence that the product works before making performance claims.
The post shows how Makrokanis uses live events and who appears alongside them, linking their content work to in-person defense-cybersecurity events.
Read more
The post promotes Summit 7 Live in Boston on September 16, 2026, focused on defense cybersecurity, and tags Daniel Akridge, Jacob Horne, and Scott Edwards.
For brands planning a campaign
The event promotion could support a sponsorship, speaking role, or live-event collaboration tied to defense cybersecurity. Ask for the event page and session details before assessing fit.
The newsletter gives Makrokanis a recurring audience touchpoint and offers a view of their distribution channel.
Read more
The post announces a refreshed weekly newsletter with quick updates on cyber threats and industry developments, published every Friday at 8 AM, and includes a sign-up link.
For brands planning a campaign
A newsletter sponsorship or co-branded update could offer a lighter collaboration than a full content piece. Ask for sample issues before evaluating the channel.
Lowering the compliance cost barrier for small defense suppliers3
Prime contractors pushing compliance down the supply chain3
A steady cadence of newsletter and blog promotion3
Events and in-person community building2
Certification milestones as proof of delivery1
Tracking policy shifts and their contractor consequences1
Civilian infrastructure as a defense cyber problem1
Lowering the compliance cost barrier for small defense suppliers
A recurring argument is that the cost of NIST SP 800-171 and CMMC compliance shuts small suppliers out of the defense industrial base.
Read more
One post describes Summit 7 being picked as one of eight companies for the US Army's NCODE program, framed as the Army's answer to the price barrier for firms with 2–10 employees.
A pilot starts May 15, with a wider launch expected within six months.
Another post previews a supply-chain readiness reception at the Association of the United States Army event and a new low-cost product aimed at contractors under 25 employees, explicitly intended to remove the cost barrier for small suppliers.
A third says the Department of War suspended CMMC Phase 2 over cost and burden concerns for small businesses, then asks whether the review will produce a costlier baseline with weaker assurance.
Company milestones, event promotion, and policy commentary all advance the same cost-barrier argument rather than stand alone as news.
For brands planning a campaign
Makrokanis is a useful collaborator for content aimed at small and micro defense subcontractors weighing the affordability of compliance. A collaboration could pair their cost-barrier argument with practical, budget-conscious compliance steps.
Prime contractors pushing compliance down the supply chain
Several posts focus on large primes requiring subcontractors to comply.
Read more
One welcomes pressure from primes and highlights Parsons Corporation's March 3 CMMC supply chain update and survey.
Another covers an L3Harris supply chain notice giving subcontractors about 80 working days to meet CMMC requirements.
A third tells prime contractors their subs must comply before the next contract and pitches visibility into subcontractor status alongside a new offering for small suppliers.
For brands planning a campaign
This is the strongest angle for a brand serving prime contractors: content about managing supplier compliance, deadlines, and visibility, not just certifying a single company.
A milestone post marks helping over 100 clients achieve CMMC Level 2 assessment certification, quotes Summit 7 CEO Scott Edwards on work dating to 2016, and credits Microsoft's partnership.
Read more
It serves as a public scoreboard for the practice area.
For brands planning a campaign
Milestone content gives a collaboration a credible progress marker. A partner can co-present results but should not imply shared credit for the certifications themselves.
Tracking policy shifts and their contractor consequences
Posts regularly connect regulatory changes to contractor impact.
Read more
One outlines the rationale behind the Department of War's 'Brilliant at the Basics' campaign, the push for phishing-resistant multi-factor authentication and stronger operational technology security, and NDIA data on contractor spending on NIST SP 800-171 and how many lack the resources to keep up. It asks whether the CMMC review will lead to a costlier baseline with less assurance of implementation.
For brands planning a campaign
Makrokanis is well suited to explanatory content that translates policy announcements into what contractors must do next. Their questioning, rather than cheerleading, tone toward government policy is a fit for brands prepared to engage with scrutiny.
Civilian infrastructure as a defense cyber problem
A distinct piece of original commentary, picked up by CyberScoop, argues that ports, railroads, and utilities supporting military operations are vulnerable to Iranian cyberattacks, while attention usually goes to government and defense industrial base networks.
Read more
The post points readers to the full article and includes the NIST SP 800-53 framework tag.
This post promotes Makrokanis's own bylined article rather than a company announcement, blog, or event.
For brands planning a campaign
Makrokanis has also carried an authored argument beyond company announcements. A collaboration could commission similar analytical writing on overlooked parts of the defense supply chain.
Posts promote live gatherings: Summit 7 Live in Boston on September 16, 2026, described as defense-focused cybersecurity, and the AUSA 2026 supply chain readiness reception in Washington, with a happy hour afterward and a schedule update to 4:00 PM ET.
Read more
A separate post tags colleagues Daniel Akridge, Jacob Horne, and Scott Edwards.
For brands planning a campaign
For event-based collaborations, these posts show how Makrokanis uses LinkedIn to drive registration and bring primes, small suppliers, and teammates together around compliance topics.
One post announces a refreshed weekly newsletter, dropping every Friday at 8 AM, with quick, meaningful updates to help readers stay ahead of threats and industry changes.
Read more
Other posts link to Summit 7 blog posts on the L3Harris notice and the CMMC policy episode.
For brands planning a campaign
A recurring channel offers partners an opening for timely, compliance-focused explainers rather than one-off campaign posts.
Makrokanis's posts show one repeated commercial focus: Summit 7's CMMC and defense supply-chain work.
Read more
They promote the company's services, events, and newsletter in first-person language, but the posts do not state whether they are an employee, owner, or client.
Ask them to clarify their relationship with Summit 7.
A separate media mention is CyberScoop, which picked up their article on Iranian cyberattacks against civilian infrastructure supporting U.S. military operations.
Other brands such as L3Harris, Parsons, Microsoft, and the U.S.
Army appear only as subjects or partners inside Summit 7 content, not as relationships with Makrokanis.
They write in first-person terms such as 'we at Summit 7' and 'Join Summit 7,' but the posts do not state whether they are an employee, owner, or client. Ask them to clarify their relationship with Summit 7.
Darron Makrokanis posts about defense cybersecurity compliance, largely through Summit 7 work: CMMC and NIST SP 800-171 requirements, the cost those requirements impose on very small subcontractors, and the pressure prime contractors put on suppliers.
Read more
They argue that compliance is necessary for the defense industrial base but priced out of reach for firms with a handful of employees, making cheaper paths to certification—not weaker expectations—the solution.
Beyond compliance, they argue that civilian infrastructure such as ports, railroads, and utilities is an overlooked part of defense cybersecurity, and assess policy changes by what they cost contractors.
Start with the CyberScoop-picked article on infrastructure, then read the analysis of the CMMC Phase 2 suspension and follow the weekly newsletter and Summit 7 event posts for updates.
Both write for defense and federal cybersecurity audiences at the intersection of CMMC and cloud authorization, treating eligibility requirements as the gate to competition.
Read more
Mayfield argues that cloud companies and ISVs without FedRAMP authorization cannot enter the federal market; Makrokanis focuses on CMMC and NIST SP 800-171 requirements.
Mayfield frames FedRAMP authorization as a competitive advantage and revenue opportunity for cloud service providers and independent software vendors, pitching the certification as a moat that disqualifies rivals. Makrokanis focuses instead on the cost burden CMMC places on very small subcontractors and on prime contractors pushing deadlines and surveys down the supply chain.
Both explain CMMC and NIST SP 800-171 obligations to defense contractors and advise continuing preparation during the CMMC Phase 2 pause, arguing that handling Controlled Unclassified Information carries duties independent of the certification timeline.
Read more
They also turn policy news into practical next steps for affected organizations.
Ward writes as an individual advisor offering gap assessments, System Security Plan and POA&M help, and fractional CISO services, drawing on stated 26-plus years in enterprise IT and cybersecurity.
Ward also posts about nonprofit leadership.
Makrokanis publishes through Summit 7 announcements, blogs, and events.
Buyers seeking personal fractional-advisory support should ask whether they offer it directly.
Both closely analyze the CMMC Phase 2 suspension, question the stated assessor-shortage rationale, distinguish the cost of a CMMC assessment from the underlying DFARS and NIST SP 800-171 obligations contractors already bear, and point to the Army N-CODE program as a model for small-business relief.
Read more
Both view a return to self-attestation as reduced verification.
McLaughlin supports the argument with Cyber AB certification data and unused assessor capacity, and writes broader pieces on AI training-data provenance and foreign influence in open corpora. Makrokanis's posts focus on Summit 7 products, events, and compliance milestones.
Measured audience evidence is limited to a LinkedIn follower count: 8,489 followers as of 9 October 2026.
Read more
Dated posts address CMMC and supply-chain readiness for defense contractors, event promotion, a weekly newsletter, and Prime/subcontractor compliance pressure.
For a CMMC and supply-chain readiness collaboration, the content is on-topic and clearly aimed at defense industrial base practitioners, but the follower count cannot confirm whether the audience includes the buying roles or company types the brand needs.
Before committing, ask for recent LinkedIn audience analytics or survey results covering geography, job function, seniority, and company size, plus engagement results on comparable CMMC and supply-chain posts of similar depth and format.
The nine posts do not describe a sponsored-content, affiliate, or paid-partnership format.
Read more
They show company-led activity around Summit 7: a Summit 7 Live event in Boston on September 16, 2026; an AUSA supply-chain readiness reception and a new low-cost compliance product for small suppliers; a weekly newsletter published Fridays at 8 AM ET; a blog covering CMMC deadlines and contractor guidance; and milestone and policy posts about CMMC certification and Department of War decisions.
Treat this as event, content, and product communication—not a published creator advertising offer.
The posts list no sponsorship terms, rates, deliverables, or approval requirements.
Before planning a collaboration, ask for the partnership policy or media kit, available formats, rates, and the right contact.
Strong fit for a defense cybersecurity compliance firm seeking a content collaboration on CMMC and supply-chain readiness.
Read more
Seven of the nine posts address CMMC, defense supply-chain readiness, or both directly.
The same arguments recur: NIST SP 800-171 and CMMC costs shut small suppliers out of the defense industrial base; the US Army NCODE program is framed as an answer for firms with 2–10 employees, alongside a low-cost product aimed at contractors under 25 employees.
Large primes are pushing compliance requirements down to subcontractors, as shown in Parsons' March 3 supply-chain update and an L3Harris notice giving subcontractors about 80 working days.
And policy changes need translating into what a contractor must do next, as in the Department of War's suspension of CMMC Phase 2 and the 'Brilliant at the Basics' push.
The collaboration could draw on an existing distribution network: a weekly newsletter published Fridays at 8 AM, a company blog used for deadline explainers, and live events such as Summit 7 Live in Boston on September 16, 2026 and an AUSA reception on October 13.
There are also usable proof points, including more than 100 clients reaching CMMC Level 2 assessment certification.
Before committing, ask for the available sponsorship formats, rates, deliverables, and inquiry route, none of which are published, and for audience analytics beyond the LinkedIn follower count of 8,489 to confirm the following includes the brand's buying roles.
Milestone content should not be presented as shared credit for certifications the company performed.
When to choose a specialist
Poor fit for a general-purpose commercial software brand—such as a workplace or HR tool—seeking non-defense mid-market buyers with short product-demo videos.
Read more
The posts contain no video, transcript, product-demo, or review format; they are company announcements, policy commentary, event promotion, and newsletter or blog links.
The substance is almost entirely specific to defense contractors: NIST SP 800-171, CMMC certification, defense industrial base subcontractors, prime-contractor supply-chain pressure, and Department of War policy.
A non-defense brand would have to translate nearly every theme before it landed.
The only audience figure available is a LinkedIn follower count, which reveals nothing about job function, industry, or company type.
Ask for audience analytics to confirm whether the following includes the non-defense buyers the brand needs.
The feed demonstrates written commentary, event hosting, and newsletter promotion, but not product-demo video.
If the brand sells into defense contractors, the campaign need changes and the fit improves; as described, the audience, topics, and demonstrated formats do not line up.
A worked campaign example
A worked angle for a CMMC and supply-chain readiness campaign: a co-produced series called 'Compliance Without the Big-Firm Budget,' aimed at subcontractors of roughly 2–25 employees and the primes that depend on them.
Step one is an anchor explainer on why cost, not capability, pushes small suppliers out of the defense industrial base.
It would build on the NCODE framing—the Army program described as serving 2–10 employee firms, with a pilot starting May 15 and a wider launch expected within six months—and the small-supplier product direction previewed at the AUSA reception.
Step two is an urgency module explaining what an 80-working-day compliance notice such as L3Harris's means in practice, with a first-30, 60, and 80-day sequence subcontractors can act on.
Step three is a prime-side companion on what visibility into subcontractor compliance status should look like, using prime pressure such as Parsons' March 3 update as the example and aiming it at the large primes the feed already reaches.
Step four distributes the series through existing channels—a newsletter installment on the Friday 8 AM cadence, a blog version for search, and a live session at a defense event such as Summit 7 Live Boston on September 16, 2026 or an AUSA reception on October 13—so the collaboration runs as one campaign rather than scattered posts.
The brand supplies the analysis, data, and practical checklists; Makrokanis carries the argument to the compliance audience.
Before committing, ask for the available format, deliverables, and rate, none of which are published; recent audience analytics covering job function, seniority, and company size; and details on the small-supplier product's capabilities, since it currently appears only as a described launch.
Milestone and certification material can frame the series but must not imply the brand performed those certifications.
The first deliverable can ship quickly by reusing an argument already running in the feed; later steps depend on the terms and audience data.
A better choice for a collaboration aimed at cloud service providers and independent software vendors selling into federal and defense markets, rather than small subcontractors preparing for a CMMC assessment.
Read more
Mayfield makes a narrower, sharper argument: cloud companies handling controlled unclassified information need FedRAMP Moderate authorization or an equivalent, and the process can take 12 to 18 months, making it too late to wait for an enforcement deadline.
The second post frames FedRAMP certification as a hard eligibility gate, not a feature advantage: agencies pre-screen for authorized vendors, and certification can disqualify rivals before an RFP is issued.
For a brand helping cloud products get through FedRAMP, Mayfield is closer to the buying decision than Makrokanis's supply-chain and small-business framing.
The topic is narrower.
Mayfield's argument leads with FedRAMP eligibility for cloud and software vendors, so a brand targeting CMMC Level 2 readiness among small defense subcontractors will find less of the small-supplier cost and prime-pressure material that runs through their posts.
The two posts show no newsletter cadence, event schedule, or certification milestone, so the brand would need to supply its own recurring distribution.
Both posts are argument-led and end with a contact invitation, pointing to a direct-response format rather than co-produced editorial or event content.
A better choice for a collaboration focused on advisory services and the uncertainty created by the suspension of CMMC Phase 2.
Read more
Ward answers contractors' immediate questions—whether to stop preparing or cancel an assessment—with a clear no: organizations handling controlled unclassified information still have contractual obligations.
The post lists concrete next steps, including maturing NIST SP 800-171 controls, remediating gaps, writing policies that work day to day, and preparing System Security Plans and POA&Ms.
It also names gap assessments and fractional CISO support as offers.
The complimentary one-hour strategy call provides a measurable lead-capture step for a campaign.
Ward also states more than 26 years in enterprise IT, cybersecurity, and compliance leadership.
The posts present an advisory offer rather than a media platform: there is no newsletter cadence, blog series, or event schedule for a brand seeking co-produced content or event sponsorship to plug into.
One of the two posts is about running a nonprofit, not defense compliance, so a defense-focused brand would be buying into a feed that mixes topics.
The commercial motion—time-based advice and a strategy call—suits brands selling consulting or assessment help better than product or platform vendors seeking demonstration content.
A better choice for a brand seeking policy argument backed by numbers and a willingness to contest the Department of War's decision to suspend CMMC Phase 2.
Read more
The post works through Cyber AB town-hall figures showing monthly Level 2 certifications rising from 123 to 279, argues that the assessor shortage does not hold up, distinguishes the cost of implementing DFARS 252.204-7012 from the cost of a CMMC assessment, and points to the Army's N-CODE program as a way to maintain verification while helping small businesses.
The second post broadens the discussion to AI training data and national security, arguing for a training data bill of materials on systems touching defense and critical infrastructure.
A brand campaigning on the policy debate or on AI and data provenance in defense gets a stronger argumentative partner here.
The style is adversarial policy analysis, which is harder to turn into the practical checklists and deadline walkthroughs a subcontractor needs.
The AI training-data post reaches beyond defense compliance into a broader national-security and technology audience, potentially diluting its relevance for a CMMC-focused brand.
Neither post documents an event schedule, newsletter cadence, or certification milestone.
Ask for audience data before committing if demonstrated reach is a deciding factor.
This page covers nine LinkedIn posts published by Makrokanis.
The posts cover CMMC and NIST SP 800-171 compliance, prime-contractor supply chain requirements, an Army small-business program, a CMMC certification milestone, a CyberScoop-picked article on civilian infrastructure, a newsletter launch, and two event promotions.
The page also includes overview, ideas, relationships, discovery, and campaign-fit sections.
The posts carry no publication timestamps; dates appear only inside the text, including March 3, May 15, September 16, 2026, and October 13.
Linked blog posts, newsletter issues, event pages, and the full CyberScoop article are not described here beyond how the posts present them.
Similar-creator comparisons cover six further posts for Keith Mayfield, Thomas Ward, and Michael McLaughlin, published between April and July 2026.
LinkedIn follower count: 8,489 on 9 October 2026.
The posts do not document a signature book, show, or earlier body of work, and no employment or ownership relationship with Summit 7 is stated, so both remain open questions rather than settled facts.