Hello and thank you in advance for any and all help.

I have a small biz (it's just me) that needs to be DFARS-7012 compliant to handle CUI.

My question is, if it's just me on the network and I'm the only authorized user, do I really need an RMM solution to be compliant?

Also, do I need whitelisting / allowlisting software (something like threatlocker) since I'm the only user and I allow myself to run everything...whether that's a good idea is another discussion :)