Learning Library

Shorts

Compliance shorts for small businesses: one idea, about a minute each. Then pick a topic to filter.

Each short is built with AI from primary sources and then reviewed by Sam Durso, CISM, CMMC Registered Practitioner Advanced, before it posts. However, they are educational only and not legal advice.

Reviewed by Sam Durso, CISM
CMMC

CMMC Level 2 Requirements: Who Needs It and Why

In general, Level 2 is the bar when your defense contract involves Controlled Unclassified Information. This short covers who falls under it and also why it exists.

Reviewed Oct 2026

Video not loading? Watch on YouTube →
Reviewed by Sam Durso, CISM
SOC 2

SOC 2 Trust Services Criteria: Which One Is Required

Out of five Trust Services Criteria, only one shows up in every SOC 2 report. As a result, this short explains which one is required and how to decide on the rest.

Reviewed Oct 2026

Video not loading? Watch on YouTube →

No shorts on this topic yet. However, new ones post every week.

New shorts post every week, so subscribe to see them on YouTube first.

Subscribe on YouTube
Sam Durso, small business cybersecurity consultant and founder of The Cyber Friend

Have a Question a Short Did Not Answer?

Of course, a minute only covers the rule. However, your contracts, systems, and budget take a conversation. For that, email info@thecyberfriend.com or start with the free assessment instead.

Take the Free Assessment