<?xml version="1.0" encoding="UTF-8"?>
<!-- /sitemap-main.xml -->
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">

  <!-- ==================== HOMEPAGE AND PRACTICE AREAS ==================== -->

  <url>
    <loc>https://davidkoran.com/</loc>
    <lastmod>2026-09-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/c2m2/</loc>
    <lastmod>2026-07-16</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  
  <url>
    <loc>https://davidkoran.com/ai-network-attack-simulator/</loc>
    <lastmod>2026-08-06</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  
  

  <!-- ==================== PRIMARY COMMERCIAL PAGES ==================== -->

  <url>
    <loc>https://davidkoran.com/cmmc-consulting-services/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-workforce-training/</loc>
    <lastmod>2026-09-04</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-prime-flowdown-tracker/</loc>
    <lastmod>2026-07-06</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-consulting-services/cmmc-consulting-services-overview.pdf</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-compliance-consulting/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-registered-practitioner-advanced/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/for-legal-counsel/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/supply-chain-compliance-office/</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/start-cmmc/</loc>
    <lastmod>2026-04-30</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.95</priority>
  </url>

  <!-- ==================== REFERENCE PAGES ==================== -->

  <url>
    <loc>https://davidkoran.com/cmmc-ssp-template/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-ecosystem-roles/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-audit/</loc>
    <lastmod>2026-04-25</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-cost/</loc>
    <lastmod>2026-04-26</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-timeline/</loc>
    <lastmod>2026-04-26</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/nist-sp-800-171/</loc>
    <lastmod>2026-04-26</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-false-claims-act-liability/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/sprs-score-accuracy/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-compliance-cost/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-mfa-implementation/</loc>
    <lastmod>2026-04-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-mfa-implementation/Multifactor_Authentication_for_the_CMMC_Environment.pdf</loc>
    <lastmod>2026-04-09</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-consultant-verification/</loc>
    <lastmod>2026-04-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-consultant-verification/Before_You_Hire_a_CMMC_Consultant.pdf</loc>
    <lastmod>2026-04-09</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- ==================== AUDIENCE SEGMENT PAGES ==================== -->

  <url>
    <loc>https://davidkoran.com/cmmc-for-aerospace-manufacturers/</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-for-small-business/</loc>
    <lastmod>2026-04-08</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/what-is-cmmc/</loc>
    <lastmod>2026-04-08</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-level-1-vs-level-2/</loc>
    <lastmod>2026-04-08</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>

  <!-- ==================== BOOK ==================== -->

  <url>
    <loc>https://davidkoran.com/the-cmmc-decision/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- ==================== CMMC CONTROLS LIBRARY ==================== -->

  <url>
    <loc>https://davidkoran.com/cmmc-controls/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/access-control/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/awareness-and-training/</loc>
    <lastmod>2026-04-27</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/audit-and-accountability/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/configuration-management/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/identification-and-authentication/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/incident-response/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/maintenance/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/media-protection/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/physical-protection/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/personnel-security/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/risk-assessment/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/security-assessment/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/system-and-communications-protection/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-controls/system-and-information-integrity/</loc>
    <lastmod>2026-04-22</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>

  <!-- ==================== CYBER INSURANCE PAGES ==================== -->

  <url>
    <loc>https://davidkoran.com/cyber-insurance-requirements/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/cyber-insurance-questionnaire/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/what-is-a-cyber-insurance-audit/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/cyber-insurance-application-evidence/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/cyber-insurance-readiness-assessment/</loc>
    <lastmod>2026-07-17</lastmod>
  </url>

  <!-- ==================== WHITE PAPERS - LANDING PAGES ==================== -->

  <url>
    <loc>https://davidkoran.com/white-papers/</loc>
    <lastmod>2026-09-02</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-bottleneck-assessment-capacity/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-msp-esp-compliance/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-phase1-realities-gao-analysis/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-secure-area-strategy/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-training-mandate/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-artifact-integrity/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-grant-funding/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-sample-ssp-poam/</loc>
    <lastmod>2026-04-05</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/no-certification-no-contract/</loc>
    <lastmod>2026-04-06</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/post-november-2026-cmmc/</loc>
    <lastmod>2026-04-07</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/can-you-subcontract-without-cmmc-certification/</loc>
    <lastmod>2026-04-14</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-identifying-unauthorized-use/</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-ecosystem-structural-reference/</loc>
    <lastmod>2026-04-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.85</priority>
  </url>

  <!-- ==================== WHITE PAPERS - PDFs ==================== -->

  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-phase1-realities-gao-gap-analysis.pdf</loc>
    <lastmod>2026-04-04</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/navigating-cmmc-ecosystem-for-executives.pdf</loc>
    <lastmod>2026-04-03</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/CMMC-MSP-ESP-Paradox-White-Paper.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/The-Secure-Area-Strategy-Whitepaper.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/The-Bottleneck-CMMC-status-in-2026.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/the-cmmc-training-mandateL2.pdf</loc>
    <lastmod>2026-04-02</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/Need_Funds_for_Your_CMMC_Program.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/file-hashing-cmmc-artifact-integrity.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/sample-cmmc-ssp-poam.pdf</loc>
    <lastmod>2026-03-31</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/can-you-subcontract-without-cmmc-certification/can-you-subcontract-without-cmmc-certification.pdf</loc>
    <lastmod>2026-04-14</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-identifying-unauthorized-use/cmmc-identifying-unauthorized-use-si-3-14-7.pdf</loc>
    <lastmod>2026-04-21</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-ecosystem-structural-reference/cmmc-ecosystem-structural-reference.pdf</loc>
    <lastmod>2026-04-23</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/c3pao/</loc>
    <lastmod>2026-05-05</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/what-is-cui/</loc>
    <lastmod>2026-05-05</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/what-is-fci/</loc>
    <lastmod>2026-05-05</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-faq-fq5-change-management/</loc>
    <lastmod>2026-05-07</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-faq-fq5-change-management/cmmc-faq-fq5-change-management.pdf</loc>
    <lastmod>2026-05-07</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-inverted-bottleneck/</loc>
    <lastmod>2026-05-11</lastmod>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-inverted-bottleneck/cmmc-inverted-bottleneck.pdf</loc>
    <lastmod>2026-05-11</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-cost-stack/</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-cost-stack/cmmc-cost-stack.pdf</loc>
    <lastmod>2026-05-13</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-november-2026-quiet/</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-november-2026-quiet/cmmc-november-2026-quiet.pdf</loc>
    <lastmod>2026-05-17</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-jobboss-e2/</loc>
    <lastmod>2026-05-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-jobboss-e2/cmmc-jobboss-e2.pdf</loc>
    <lastmod>2026-05-23</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-jobboss2/</loc>
    <lastmod>2026-05-24</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-jobboss2/cmmc-jobboss2.pdf</loc>
    <lastmod>2026-05-24</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-grc-platforms/</loc>
    <lastmod>2026-05-28</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-grc-platforms/cmmc-grc-platforms.pdf</loc>
    <lastmod>2026-05-28</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/subcontractor-cmmc-flowdown-32-cfr-170-23/</loc>
    <lastmod>2026-06-01</lastmod>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/subcontractor-cmmc-flowdown-32-cfr-170-23/subcontractor-cmmc-flowdown-32-cfr-170-23.pdf</loc>
    <lastmod>2026-06-01</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/your-cmmc-ssp-is-the-assessment/</loc>
    <lastmod>2026-06-12</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/your-cmmc-ssp-is-the-assessment/your_cmmc_ssp_is_the_assessment.pdf</loc>
    <lastmod>2026-06-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/before-you-hire-a-cmmc-consultant/</loc>
    <lastmod>2026-06-14</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/managing-cmmc-with-your-subcontractors/managing-cmmc-with-your-subcontractors.pdf</loc>
    <lastmod>2026-06-15</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/managing-cmmc-with-your-subcontractors/</loc>
    <lastmod>2026-06-15</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/is-the-g-code-cui/</loc>
    <lastmod>2026-06-18</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/is-the-g-code-cui/Is_The_G-Code_CUI.pdf</loc>
    <lastmod>2026-06-18</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/proposed-FAR-CUI-rule-management-brief/</loc>
    <lastmod>2026-06-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/proposed-FAR-CUI-rule-management-brief/Proposed_FAR_CUI_Rule_Management_Brief.pdf</loc>
    <lastmod>2026-06-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.80</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/CMMC-who-owns-the-control/</loc>
    <lastmod>2026-06-27</lastmod>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/CMMC-who-owns-the-control/CMMC-who-owns-the-control.pdf</loc>
    <lastmod>2026-06-27</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/press/national-defense-cmmc-y2k/</loc>
    <lastmod>2026-06-27</lastmod>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/fedramp-20x-cmmc-cloud-requirement/</loc>
    <lastmod>2026-07-03</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/fedramp-20x-cmmc-cloud-requirement/FedRAMP_20x_Certification_Classes_CMMC_Cloud_Requirement.pdf</loc>
    <lastmod>2026-07-03</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.6</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/The-VPN-Under-CMMC-Level-2/</loc>
    <lastmod>2026-07-05</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/sprs-score/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-executive-series/</loc>
    <lastmod>2026-07-12</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-executive-series/cmmc-implementation/</loc>
    <lastmod>2026-07-12</lastmod>
  </url>

  <!-- ==================== THE CMMC GUIDE ==================== -->

  <url>
    <loc>https://davidkoran.com/cmmc-guide/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>weekly</changefreq>
    <priority>1.0</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/foundations/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/core-concepts/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/controls/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/assessment/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/reference/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/existing-contracts/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/myths-and-qa/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/news/</loc>
    <lastmod>2026-07-13</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>

  <!-- Part III: the 110 Level 2 control entries -->

  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-10/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-11/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-12/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-13/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-14/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-15/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-16/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-17/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-18/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-19/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-20/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-21/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ac-l2-3-1-22/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/at-l2-3-2-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/at-l2-3-2-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/at-l2-3-2-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/au-l2-3-3-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/cm-l2-3-4-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-10/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ia-l2-3-5-11/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ir-l2-3-6-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ir-l2-3-6-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ir-l2-3-6-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ma-l2-3-7-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/mp-l2-3-8-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ps-l2-3-9-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ps-l2-3-9-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/pe-l2-3-10-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ra-l2-3-11-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ra-l2-3-11-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ra-l2-3-11-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ca-l2-3-12-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ca-l2-3-12-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ca-l2-3-12-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/ca-l2-3-12-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-8/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-9/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-10/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-11/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-12/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-13/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-14/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-15/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/sc-l2-3-13-16/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-1/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-2/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-3/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-4/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-5/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-6/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/cmmc-guide/si-l2-3-14-7/</loc>
    <lastmod>2026-07-12</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.7</priority>
  </url>

  <!-- ==================== RECENT CMMC PUBLICATIONS ==================== -->

  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-suspended/</loc>
    <lastmod>2026-07-15</lastmod>
    <changefreq>weekly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/cmmc-suspended/cmmc-snow-day.pdf</loc>
    <lastmod>2026-07-15</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.7</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/dow-cio-dod-information/dow-cmmc-suspend-questionnaire.pdf</loc>
    <lastmod>2026-07-15</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/one-standard-two-levels-of-assurance/</loc>
    <lastmod>2026-07-16</lastmod>
  </url>
  <url>
    <loc>https://davidkoran.com/white-papers/one-standard-two-levels-of-assurance/One_Standard_Two_Levels_of_Assurance.pdf</loc>
    <lastmod>2026-07-16</lastmod>
  </url>

  <!-- ==================== MARITIME CYBERSECURITY ==================== -->

  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/cybersecurity-assessment-scoping/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/critical-it-ot-designation/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/subpart-f-program-lifecycle/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/waiver-equivalency-submission/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/white-papers/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.9</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/white-papers/the-uscg-cybersecurity-officer-problem/</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.85</priority>
  </url>
  <url>
    <loc>https://davidkoran.com/maritime-cybersecurity/white-papers/the-uscg-cybersecurity-officer-problem/The-USCG-Cybersecurity-Officer-Problem.pdf</loc>
    <lastmod>2026-07-23</lastmod>
    <changefreq>yearly</changefreq>
    <priority>0.8</priority>
  </url>
  <url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/</loc>
  <lastmod>2026-07-30</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/remove-internet-exposed-plcs/</loc>
  <lastmod>2026-07-28</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/mtsa-waiver-not-cybersecurity-exemption/</loc>
  <lastmod>2026-07-28</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/fedramp-ready-ends-fedramp-20x/</loc>
  <lastmod>2026-07-28</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/minnesota-water-systems-ot-cyberattack/</loc>
  <lastmod>2026-07-29</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/daily-cybersecurity-brief/cisco-fmc-static-credential-authentication-bypass/</loc>
  <lastmod>2026-07-30</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/nist-ai-rmf/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/iso-42001/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/shadow-ai/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/ai-use-policy/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/state-ai-laws/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/texas-traiga/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/ai-vendor-due-diligence/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/white-papers/</loc>
  <lastmod>2026-08-05</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/white-papers/how-to-build-an-ai-governance-program/</loc>
  <lastmod>2026-08-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/white-papers/ai-in-defense-manufacturing/</loc>
  <lastmod>2026-08-03</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/white-papers/agentic-ai-governance/</loc>
  <lastmod>2026-08-05</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/ai-governance/nist-tevv-athlon-framework/</loc>
  <lastmod>2026-08-07</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/white-papers/dibcac-assessment/</loc>
  <lastmod>2026-09-02</lastmod>
</url>
<url>
  <loc>https://davidkoran.com/white-papers/dibcac-assessment/how-the-dibcac-assessment-works.pdf</loc>
  <lastmod>2026-09-02</lastmod>
</url>

</urlset>