<?xml version="1.0" encoding="UTF-8"?>
<!-- /sitemap-controls.xml -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- ── Landing page ───────────────────────────────────────────────── -->
  <url>
    <loc>https://davidkoran.com/cmmc-controls/</loc>
    <lastmod>2026-04-22</lastmod>
    <priority>0.8</priority>
  </url>

  <!-- ── AC: Access Control (22 controls) ─────────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_10.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_11.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_12.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_13.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_14.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_15.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_16.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_17.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_18.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_19.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_20.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_21.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AC-L2-3_1_22.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── AT: Awareness & Training (3 controls) ────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AT-L2-3_2_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AT-L2-3_2_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AT-L2-3_2_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── AU: Audit & Accountability (9 controls) ──────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_AU-L2-3_3_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── CA: Security Assessment (4 controls) ─────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CA-L2-3_12_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CA-L2-3_12_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CA-L2-3_12_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CA-L2-3_12_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── CM: Configuration Management (9 controls) ────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_CM-L2-3_4_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── IA: Identification & Authentication (11 controls) ────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_10.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IA-L2-3_5_11.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── IR: Incident Response (3 controls) ───────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IR-L2-3_6_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IR-L2-3_6_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_IR-L2-3_6_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── MA: Maintenance (6 controls) ─────────────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MA-L2-3_7_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── MP: Media Protection (9 controls) ────────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_MP-L2-3_8_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── PE: Physical Protection (6 controls) ─────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PE-L2-3_10_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── PS: Personnel Security (2 controls) ──────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PS-L2-3_9_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_PS-L2-3_9_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── RA: Risk Assessment (3 controls) ─────────────────────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_RA-L2-3_11_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_RA-L2-3_11_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_RA-L2-3_11_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── SC: System & Communications Protection (16 controls) ─────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_8.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_9.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_10.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_11.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_12.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_13.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_14.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_15.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SC-L2-3_13_16.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

  <!-- ── SI: System & Information Integrity (7 controls) ──────────── -->
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_1.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_2.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_3.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_4.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_5.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_6.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>
  <url><loc>https://davidkoran.com/cmmc-controls/CMMC_SI-L2-3_14_7.pdf</loc><lastmod>2026-03-31</lastmod><priority>0.5</priority></url>

</urlset>