Shows / CMMC Brief
CMMC Brief
Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact for DIB contractors, compliance managers, and the MSPs and consultants who support them. From Carolina Clear Tech.
Episodes
- CMMC Brief
2026-10-29: A reported CMMC task force review outlines reform options
Show Notes - 2026-10-29 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-28: Reported CMMC task force recommendations offer reform options
Show Notes - 2026-10-28 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-27: Federal News Network reports that CMMC review responses identify security implementation
Show Notes - 2026-10-27 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-24: A reported Honeywell Aerospace settlement underscores the need to substantiate cybersecurity
Show Notes - 2026-10-24 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-22: A rehearing brief in Anthropic's Pentagon dispute is a reason to review AI supplier dependencies
Show Notes - 2026-10-22 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-21: Keep self-assessment evidence current during the paused third-party phase-in
Show Notes - 2026-10-21 Stories Covered Today: Separate the phase-in pause from the obligation to protect information. [Policy & Rulemaking] Policy status…
- CMMC Brief
2026-10-20: Keep Phase I self-assessment work and applicable contract safeguards funded while checking the
Show Notes - 2026-10-20 Stories Covered Today: Action: [Policy & Rulemaking] Action: [Policy & Rulemaking] Action: [NIST & Standards] Action: [Contracting…
- CMMC Brief
2026-10-17: NIST & Standards
Show Notes - 2026-10-17 Stories Covered October 17, 2026: Read the full brief
- CMMC Brief
2026-10-16: Policy & Rulemaking
Show Notes - 2026-10-16 Stories Covered October 16, 2026: Read the full brief
- CMMC Brief
2026-10-14: DoD's (DoW's) Oct 1 implementation memo on cost transparency clarifies that contractors are not
Show Notes - 2026-10-14 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-13: A Reddit thread clarifies SPRS visibility rules for primes (they cannot see supplier scores
Show Notes - 2026-10-13 Stories Covered Today: Primes cannot see supplier SPRS scores directly; they must request them. [Contracting Impact] Army announces…
- CMMC Brief
2026-10-12: Defense contractors on Reddit are navigating CAD outsourcing proof points for CUI projects
Show Notes - 2026-10-12 Stories Covered Today: Reddit marketplace questions show contractors wrestling with proof and scope during the CMMC suspension…
- CMMC Brief
2026-10-10: No signed policy or enforcement news landed in this batch
Show Notes - 2026-10-10 Stories Covered Today: Skipped sections: [Practitioner Pulse] Read the full brief
- CMMC Brief
2026-10-09: No signed policy, enforcement action, or Cyber AB statement landed in today's feed
Show Notes - 2026-10-09 Stories Covered Today: Read the full brief
- CMMC Brief
2026-10-07: NIST's AI Accelerator director addressed post-deployment drift monitoring for generative AI
Show Notes - 2026-10-07 Stories Covered Today: What to do: [NIST & Standards] What to do: [Contracting Impact] DIB angle: [Practitioner Pulse] Read the full…
- CMMC Brief
2026-10-06: A practitioner webinar confirmed that 89% of polled DIB organizations are pressing ahead with CMMC
Show Notes - 2026-10-06 Stories Covered Today: No new signed policy or rulemaking actions today. [Policy & Rulemaking] Action: [Policy & Rulemaking] No new…
- CMMC Brief
2026-10-05: PreVeil announced a free virtual CMMC summit (Oct 28) featuring the SP 800-171 author
Show Notes - 2026-10-05 Stories Covered Today: PreVeil CMMC Security Summit scheduled for Oct 28 (virtual, free) [Practitioner Pulse] On Oct 2, a Reddit user…
- CMMC Brief
2026-10-02: No new CMMC-specific rulemaking or enforcement actions landed today
Show Notes - 2026-10-02 Stories Covered Today: DoD Proposed Rule Would Expand FOCI Reporting for Cleared Contractors. [Policy & Rulemaking] Watch item…
- CMMC Brief
2026-10-01: No new CMMC policy actions or cyber-related False Claims Act cases dropped today
Show Notes - 2026-10-01 Stories Covered Today: Action: [Policy & Rulemaking] Action: [Enforcement & False Claims] Action: [NIST & Standards] Action…
- CMMC Brief
2026-09-30: NIST post-quantum cryptography standards continue driving federal migration timelines that will
Show Notes - 2026-09-30 Stories Covered Today: CIRCIA final rule expected this fall, with harmonization focus. [Policy & Rulemaking] Post-quantum cryptography…
- CMMC Brief
2026-09-29: A Defense Manpower Data Center breach exposed 3 million records
Show Notes - 2026-09-29 Stories Covered Today: CCP and CCA certifications during the suspension. [Practitioner Pulse] GRC platform selection. [Practitioner…
- CMMC Brief
2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2
Show Notes - 2026-09-26 Stories Covered Today: Former CMMC Leaders Publish Defense of Program During Suspension [Policy & Rulemaking] IG Report: 86% of…
- CMMC Brief
2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on
Show Notes - 2026-09-25 Stories Covered Today: DoD moves to replace Cost Accounting Standards with GAAP. [Policy & Rulemaking] Revolutionary FAR Overhaul…
- CMMC Brief
2026-09-24: No policy developments, enforcement actions, or ecosystem announcements
Show Notes - 2026-09-24 Stories Covered Today: CAD vendor certification requirements for CUI handling. [Practitioner Pulse] Katie Arrington calls CMMC pause…
- CMMC Brief
2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation
Show Notes - 2026-09-23 Stories Covered Today: Proposed NDAA "Right to Repair" Provisions Would Default Contractor Technical Data to Government Purpose Rights…
- CMMC Brief
2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public)
Show Notes - 2026-09-22 Stories Covered Today: CMMC Reform Task Force submitted its report; recommendations not yet public. [Policy & Rulemaking] What to do…
- CMMC Brief
2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB
Show Notes - 2026-09-21 Stories Covered Today: Open-CMMC v2.0 extends CUI workflow protection to OT systems [Practitioner Pulse] Contractor reports passing…
- CMMC Brief
2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory
Show Notes - 2026-09-19 Stories Covered Today: DOJ revises Justice Manual to limit False Claims Act enforcement to binding legal obligations. [Enforcement &…
- CMMC Brief
2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under
Show Notes - 2026-09-18 Stories Covered Today: ISOO Releases CUI Notices 2026-07 and 2026-08: Agencies Must Give Contractors Explicit CUI Handling Guidance…
- CMMC Brief
2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation
Show Notes - 2026-09-17 Stories Covered Today: CIRCIA Final Rule Expected This Month; DIB Contractors Face Overlapping Reporting Obligations [Policy &…
- CMMC Brief
2026-09-16: DoD's new class deviation confirms baseline DFARS 7012 and NIST 800-171 Rev 2 compliance remain
Show Notes - 2026-09-16 Stories Covered Today: What remains mandatory: [Policy & Rulemaking] What is suspended: [Policy & Rulemaking] Action: [Policy &…
- CMMC Brief
2026-09-15: Cyber AB CEO Matthew Travis outlined reform proposals including continuous monitoring and smaller
Show Notes - 2026-09-15 Stories Covered Today: Cyber AB submits reform recommendations to DoW Reform Task Force [Policy & Rulemaking] DoW Class Deviation…
- CMMC Brief
2026-09-12: Honeywell settled a $2M False Claims Act case for failing to implement NIST 800-171 controls on a
Show Notes - 2026-09-12 Stories Covered Today: 60-Day Suspension Review Period Ends, No Public Guidance Yet [Policy & Rulemaking] White House Quantum Executive…
- CMMC Brief
2026-09-05: No CMMC-specific policy, enforcement, or rulemaking developments today
Show Notes - 2026-09-05 Stories Covered Today: Executive Order 14421: Bulk-Power System Supply Chain Security (Signed, Aug. 26, 2026) [Policy & Rulemaking]…
- CMMC Brief
2026-08-26: No policy, rulemaking, or enforcement developments
Show Notes - 2026-08-26 Stories Covered Today: Compliance cost benchmarks now public. [Practitioner Pulse] What to do: [Practitioner Pulse] CMMC jargon guide…
- CMMC Brief
2026-08-25: The Navy stood up a new Office of the Defense Industrial Base to revitalize maritime supply chains
Show Notes - 2026-08-25 Stories Covered Today: Navy creates Office of the Defense Industrial Base to accelerate dual-use tech and supply chain resilience…
- CMMC Brief
2026-08-22: The FAR CUI proposed rule mandating NIST SP 800-171 rev 3 across all federal contracts is expected
Show Notes - 2026-08-22 Stories Covered Today: FAR CUI Rule: Government-Wide NIST 800-171 Rev 3 Mandate Coming Before Year-End [Policy & Rulemaking] Action…
- CMMC Brief
2026-08-15: The r/CMMC community is working through FIPS 140-3 validation requirements and GCC-High migration
Show Notes - 2026-08-15 Stories Covered Today: FIPS 140-3 Validation: What DIB Contractors Need to Know [NIST & Standards] Action: [NIST & Standards]…
- CMMC Brief
2026-08-09: DoW CIO Kirsten Davies signaled at Black Hat that the Phase 2 hold may be termed a "pause" rather
Show Notes - 2026-08-09 Stories Covered Today: Action item: [Policy & Rulemaking] VOIP voicemail and FedRAMP scope creep. [Practitioner Pulse] GCC High…
- CMMC Brief
2026-08-08: A Federal News Network interview with early CMMC Level 2 adopter IntelliGenesis highlights the real
Show Notes - 2026-08-08 Stories Covered Today: Read the full brief
- CMMC Brief
2026-08-07: No new CMMC rulemaking or enforcement actions dropped today
Show Notes - 2026-08-07 Stories Covered Today: What to do: [Policy & Rulemaking] What to do: [Contracting Impact] What to do: [Contracting Impact] What to do…
- CMMC Brief
2026-08-06: No new CMMC policy actions, enforcement cases, or standards updates surfaced in today's collection
Show Notes - 2026-08-06 Stories Covered Today: Bottom line: [Practitioner Pulse] Read the full brief
- CMMC Brief
2026-08-04: Practitioners report confusion about Level 2 self-assessment vs C3PAO timelines during the
Show Notes - 2026-08-04 Stories Covered Today: Default termination burden [Contracting Impact] Space Force acquisition shift [Contracting Impact] Read the full…
- CMMC Brief
2026-08-01: DoD raised the TINA certified cost/pricing data threshold to $10M effective July 1
Show Notes - 2026-08-01 Stories Covered Today: DoD IT Category Management Directive (DoW Instruction 8000.02) Takes Effect [Policy & Rulemaking] Chinese…
- CMMC Brief
2026-07-31: A new Executive Order requires defense prime contractors and subcontractors at every tier to map
Show Notes - 2026-07-31 Stories Covered Today: Executive Order: Securing America's Defense Supply Chains (Signed July 20, 2026) [Policy & Rulemaking]…
- CMMC Brief
2026-07-30: A practitioner shared a detailed CMMC-CCP exam pass/fail breakdown on Reddit that surfaces real
Show Notes - 2026-07-30 Stories Covered Today: CMMC-CCP Exam: First-Hand Pass/Fail Breakdown Reveals Study Gaps [Practitioner Pulse] Summit 7 Dissects…
- CMMC Brief
2026-07-29: Federal agencies are debating whether commercial technology acquisition policies can coexist with
Show Notes - 2026-07-29 Stories Covered Today: CUI requirements creating commercial technology access tension across federal agencies. [Policy & Rulemaking]…
- CMMC Brief
2026-07-28: The CMMC suspension continues to drive confusion among practitioners preparing for presentations
Show Notes - 2026-07-28 Stories Covered Today: Quantum Computing Executive Orders Set 2031 PQC Migration Deadline [Policy & Rulemaking] Claim Sponsorship in…
- CMMC Brief
2026-07-25: Summit 7 published MSP vs MSSP guidance for CMMC contractors
Show Notes - 2026-07-25 Stories Covered Today: MSP vs MSSP: different roles, both needed for CMMC [Practitioner Pulse] Action: [Practitioner Pulse] No…
- CMMC Brief
2026-07-24: DoD suspended CMMC Phase 2 third-party assessment requirements pending a Reform Task Force review
Show Notes - 2026-07-24 Stories Covered Today: DoD suspended CMMC Phase 2 C3PAO requirements (signed policy). [Policy & Rulemaking] SBA commended the…
- CMMC Brief
2026-07-23: The Phase II suspension memo continues to ripple through the procurement landscape
Show Notes - 2026-07-23 Stories Covered Today: CMMC Phase II Suspended, Reform Task Force Launched (Signed Memo, Memo 26-P-1023, July 13, 2026) [Policy &…
- CMMC Brief
2026-07-22: Federal News Network interviews confirm DoD's CMMC Phase 2 suspension changes nothing about
Show Notes - 2026-07-22 Stories Covered Today: CMMC Phase 2 suspended, but 800-171 obligations unchanged (task force review, not a repeal). [Policy &…
- CMMC Brief
2026-07-21: Summit 7 released implementation guidance on managed CUI enclaves as the fastest CMMC compliance
Show Notes - 2026-07-21 Stories Covered Today: Summit 7 publishes CUI enclave implementation guide for contractors with small CUI footprints. [Practitioner…
- CMMC Brief
2026-07-18: The CMMC Reform Task Force held its first meeting Thursday and will report by late September
Show Notes - 2026-07-18 Stories Covered Today: CMMC Reform Task Force launches with first meeting, 60-day review timeline begins. [Policy & Rulemaking] DoD…
- CMMC Brief
2026-07-17: No CMMC, DFARS cybersecurity, or defense industrial base compliance developments reported in
Show Notes - 2026-07-17 Stories Covered Today: What still applies during the suspension: [Note on Today's Collection] Action items: [Note on Today's…
- CMMC Brief
2026-07-16: DoD issued a formal RFI on SAM.gov seeking industry input on what replaces the paused CMMC Phase 2
Show Notes - 2026-07-16 Stories Covered Today: DoD opens RFI on the post-suspension CMMC model; suspension itself is signed and in force. [Policy & Rulemaking]…