Shows / CMMC Compliance Guide

CMMC Compliance Guide
Our experiences inspired the creation of The CMMC Compliance Guide Podcast and its accompanying resources. The podcast began as a way to share what we learned through real-world challenges—like helping that aerospace machine shop—and to provide accessible education for businesses navigating DoD cybersecurity requirements.
The CMMC Compliance Guide Podcast breaks down complex topics like NIST 800-171 and CMMC into actionable, easy-to-understand steps. Whether you’re a subcontractor struggling to…
Episodes
CMMC Compliance GuideWhat Actually Happens During a CMMC Level 2 C3PAO Assessment, Day by Day: Evidence, Hot Wash, Certificate, and What If You Don’t Pass
Submit any questions you would like answered on the podcast! You’ve done the work, the assessment is scheduled, and your stomach is in knots. What actually…
CMMC Compliance GuideCMMC for Machine Shops: Windows 7 CNC Controllers, Shared Shop Logins, Encrypted USB Drives, and MFA Without Personal Phones
Submit any questions you would like answered on the podcast! You have a $400,000 CNC machine running a Windows 7 controller that the manufacturer won’t update…
CMMC Compliance GuideThe 10 CMMC Questions Defense Suppliers Ask Us Most: A Self-Check for Your Compliance Program
Submit any questions you would like answered on the podcast! These are the 10 questions Stacey and Brooke hear more than any other from defense suppliers, and…
CMMC Compliance GuideSPRS Scoring Explained in Plain English: How the 110-to-Negative-203 Scale Works and How to Fix a Bad Score
Submit any questions you would like answered on the podcast! Your SPRS score can quietly decide whether your company is even eligible to bid on a DoD contract…
CMMC Compliance GuideCMMC Level 2 Explained in Plain English: Phases, POA&M Rules, Assessments, and What Level You Actually Need
Submit any questions you would like answered on the podcast! What does CMMC Level 2 actually require, and how does it connect to the four-phase rollout, the…
CMMC Compliance GuideCMMC Vendor Marketing Claims Decoded: What "Covers 90 of 110 Controls" Actually Means
Submit any questions you would like answered on the podcast! Every CMMC vendor says the same thing: "we cover 80 out of 110 controls" or "90 out of 110."…
CMMC Compliance GuideThe Real Cost of CMMC Scoping Mistakes: Is "Six Figures" Real or Just Marketing?
Submit any questions you would like answered on the podcast! Is the "six-figure CMMC scoping mistake" a real number, or just something people throw around to…
CMMC Compliance GuideThe Complete CMMC Compliance Checklist for 2026: Phase 2 Pause, Level 1 vs Level 2, Scoping, and Vendor Documentation
Submit any questions you would like answered on the podcast! This is the all-in-one CMMC checklist episode. Austin and Brooke pull together everything into one…
CMMC Compliance GuideCyber AB June 2026 Town Hall Recap: Enforcement Data, Paper CUI Rules, Choosing a C3PAO, and the FAR CUI Update
Submit any questions you would like answered on the podcast! We're recapping the Cyber AB's June 2026 Town Hall, five topics every DoD contractor needs to…
CMMC Compliance GuideCMMC Phase 2 Paused: Why the DoD's Reasoning Doesn't Add Up, and What to Expect After the 60-Day Review
Submit any questions you would like answered on the podcast! The Department of War's pause on CMMC Phase 2 sparked a wave of panic, and a wave of…
CMMC Compliance GuideCMMC Phase 2 Certification Paused for 60 Days: What the DoD Memo Really Changes (and What It Doesn't)
Submit any questions you would like answered on the podcast! Here are the actual memos (Definitely worth a read)…
CMMC Compliance GuideCMMC for Small Aerospace Suppliers: Real Costs, DIY Limits, Level 1 vs 2, and the November 2026 Deadline
Submit any questions you would like answered on the podcast! Small aerospace suppliers are getting hit with the same CMMC questions over and over: what do I…
CMMC Compliance GuideCyber AB May 2026 Town Hall Recap: External Service Providers, Marketplace 2.0, New Leadership & OSC Accountability Explained
Submit any questions you would like answered on the podcast! The Cyber AB's May 2026 Town Hall packed in major updates and if you work with an MSP, use cloud…
CMMC Compliance GuideNew CMMC FAQ Clarifications: Joint Ventures, Paper-Only CUI, Reassessment Triggers & Where MSPs Actually Fit in Scope
Submit any questions you would like answered on the podcast! The Department of Defense just updated its CMMC FAQ document — and the clarifications inside…
CMMC Compliance GuideThe CMMC Reality Check: Gap Assessments, Documentation Overload & Why 30-Day Compliance Claims Are a Red Flag
Submit any questions you would like answered on the podcast! Most defense contractors don't realize how complex CMMC compliance really is until they're already…
CMMC Compliance GuideCS5 West 2026 CMMC Recap for Defense Contractor
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, Brooke breaks down the biggest takeaways…
CMMC Compliance GuideHow Small Defense Contractors Can Handle CMMC Compliance
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we tackle one of the biggest challenges in…
CMMC Compliance GuideWhy Contractors Fail CMMC Assessments and How to Prepare
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we break down one of the most frustrating…
CMMC Compliance GuideTop CMMC Compliance Mistakes and How to Avoid Them
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we break down the most common mistakes…
CMMC Compliance GuideCan You Create CUI? CMMC Scope, ERP Systems, and Contractor Risk Explained
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we tackle one of the most misunderstood…
CMMC Compliance GuideThe Hidden Operational Workload Behind CMMC Compliance
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we break down one of the biggest…
CMMC Compliance GuideCMMC Reassessments Explained: What Changes Trigger a New Assessment
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, we break down one of the most overlooked…
CMMC Compliance GuideHow Prime Contractors Evaluate Supplier Cybersecurity and CMMC Compliance
Submit any questions you would like answered on the podcast! What are prime contractors actually expecting from suppliers when it comes to CMMC and…
CMMC Compliance GuideCMMC Supplier Questions Answered: Level 1 vs Level 2, Costs, Scope, and Flowdown for DoW Contractors
Submit any questions you would like answered on the podcast! What do small machine shops, aerospace suppliers, and defense manufacturers really need to know…
CMMC Compliance GuideCMMC Level 1 Self-Attestation Explained: Requirements, Evidence, and Risk
Submit any questions you would like answered on the podcast! lot of contractors assume CMMC Level 1 is just a simple checkbox. It is not. In this episode…
CMMC Compliance GuideCMMC Scoping 101: The Most Expensive Mistake Contractors Make (And How to Fix It)
Submit any questions you would like answered on the podcast! Scope is the foundation of your CMMC compliance program and getting it wrong is one of the most…
CMMC Compliance GuideKey Takeaways from the January 2026 CMMC Town Hall: Hard Copy CUI, Scope, and Program Changes
Submit any questions you would like answered on the podcast! The January 2026 CMMC Town Hall brought several important clarifications and program updates that…
CMMC Compliance GuideWhy Feeling “CMMC Ready” Isn’t the Same as Passing a Level 2 Assessment
Submit any questions you would like answered on the podcast! Many DoW contractors feel confident they’re ready for a CMMC Level 2 assessment until assessors…
CMMC Compliance GuideCMMC FAQ Update: Timeline, Subcontractor Flowdowns, Enclaves, Cloud Rules, and VDI Scope Explained
Submit any questions you would like answered on the podcast! The DoW just released updated CMMC FAQs that clarify the rules contractors keep getting wrong. In…
CMMC Compliance GuideHow to Triage CMMC Compliance When You’re Overwhelmed and Short on Time
Submit any questions you would like answered on the podcast! When CMMC compliance starts to feel overwhelming, most companies don’t fail because they lack…
CMMC Compliance GuideCMMC Evidence 101: How to Prove NIST 800-171 Compliance in a Level 2 Assessment
Submit any questions you would like answered on the podcast! Get your free SPRS Roadmap here: https://cmmccomplianceguide.com/free-sprs-roadmap In this episode…
CMMC Compliance GuideWhat CMMC Assessors Notice First: Early Red Flags That Fail Level 2 Assessments
Submit any questions you would like answered on the podcast! What do CMMC Level 2 assessors notice first, sometimes within the first day, before they ever dig…
CMMC Compliance GuideCMMC Paperwork Without the Pain: How to Simplify Policies, SSP, and Evidence (Level 1 vs Level 2)
Submit any questions you would like answered on the podcast! Most small and mid-sized manufacturers do not fail CMMC because of “tech.” They fail because their…
CMMC Compliance GuideHow CMMC Became a Competitive Advantage for DoD Contractors
Submit any questions you would like answered on the podcast! CMMC is no longer just a compliance requirement. It is now a competitive advantage that directly…
CMMC Compliance GuideNIST 800-171 and CMMC 2.0: How Assessors Actually Score You
Submit any questions you would like answered on the podcast! Are assessors judging you on CMMC or NIST 800 171 when audit day arrives? In this episode of the…
CMMC Compliance GuideTop CMMC Myths Debunked: Cloud, Vendors, Firewalls, and MFA Mistakes Explained
Submit any questions you would like answered on the podcast! Today’s episode of the CMMC Compliance Guide Podcast dives into the biggest myths that machine…
CMMC Compliance GuidePlain English Guide to CMMC Level 1: Basic Cybersecurity Without the Headache
Submit any questions you would like answered on the podcast! CMMC Level 1 Self- Assessment Guide…
CMMC Compliance GuideTop 12 CMMC Level 2 Requirements Explained: Gap Assessments, Scope, SSP, and POA&M
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, Stacey and Austin from Justice IT Consulting…
CMMC Compliance GuideCyber AB Town Hall Breakdown: Legal Lessons, Ecosystem Growth, and CMMC Phase 2 Progress
Submit any questions you would like answered on the podcast! In this episode of the CMMC Compliance Guide Podcast, Brooke and Stacey from Justice IT Consulting…
CMMC Compliance GuideHighlights from CS5 East 2025: Operation Midnight Hammer, CMMC Updates, and AI Insights
Submit any questions you would like answered on the podcast! Get the inside scoop from CS5 East 2025, the largest cybersecurity and compliance event for the…
CMMC Compliance GuideHow to Prove CMMC Compliance to Prime Contractors (Before You Lose Contracts)
Submit any questions you would like answered on the podcast! 🎯 Get your Free SPRS Roadmap Session: https://cmmccomplianceguide.com/free-sprs-roadmap Our…
CMMC Compliance GuideCyber AB Town Hall September 2025: Key CMMC Compliance Updates
Submit any questions you would like answered on the podcast! The September 2025 Cyber AB Town Hall dropped big updates for contractors navigating CMMC and NIST…
CMMC Compliance GuideHandling CUI Correctly: Compliance Risks and Best Practices
Submit any questions you would like answered on the podcast! Worried about mishandling Controlled Unclassified Information (CUI)? In this episode of the CMMC…
CMMC Compliance GuideCMMC Final Rule Explained: Deadlines, Requirements, and Next Steps for Defense Contractors
Submit any questions you would like answered on the podcast! The wait is over: the Department of Defense has finalized the CMMC rule, officially making it part…
CMMC Compliance GuideThe Role of NIST 800-171 in Your CMMC Assessment
Submit any questions you would like answered on the podcast! Confused about where NIST 800-171 fits into your CMMC 2.0 assessment? You’re not alone. In this…
CMMC Compliance GuideThe Truth About CMMC Enclaves: Pros, Cons, and Compliance Risks
Submit any questions you would like answered on the podcast! Thinking about building an enclave for CMMC compliance? Not so fast. In this episode of the CMMC…
CMMC Compliance GuideAre You Really Ready for a CMMC Assessment?
Submit any questions you would like answered on the podcast! Think you’re ready for your CMMC assessment? In this episode of the CMMC Compliance Guide Podcast…
CMMC Compliance GuideWhen ‘Not Applicable’ Can Cost You Contracts
Submit any questions you would like answered on the podcast! Marking a CMMC control as “Not Applicable” might feel like an easy shortcut but get it wrong, and…
CMMC Compliance GuideHow to Make Real CMMC Progress: Even if Compliance Isn’t Your Full-Time Job
Submit any questions you would like answered on the podcast! Schedule your free SPRS Roadmap Session and get a step-by-step plan to close gaps and stay…
CMMC Compliance GuideWhat You Missed: June Cyber AB Town Hall CMMC Highlights
Submit any questions you would like answered on the podcast! 48 CFR UPDATE: https://www.ecfr.gov/current/title-48/chapter-2/subchapter-A/part-204/subpart-204.75…
CMMC Compliance Guide6 Critical CMMC Questions Every Small DoD Contractor Should Know
Submit any questions you would like answered on the podcast! Are you trying to navigate CMMC and NIST 800-171 with a small team and limited resources? You're…
CMMC Compliance GuideCMMC on the Shop Floor: A No-BS Guide for CNC & Aerospace Machine Shops
Submit any questions you would like answered on the podcast! Happy 4th of July from the team at CMMC Compliance Guide Podcast! While you're celebrating…
CMMC Compliance GuideCeasefire’s Here, But Your Shop’s Still a Target: What the DoD CIO Just Told Defense Contractors
Submit any questions you would like answered on the podcast! 🆓 Need help getting your SPRS score to 110? Schedule your free SPRS Roadmap Session and get a…
CMMC Compliance GuideBreaking Down the Real Cost of CMMC Compliance for Small Businesses
Submit any questions you would like answered on the podcast! Why is CMMC compliance so expensive—especially for small businesses? In this episode of the CMMC…
CMMC Compliance GuideHow to Scope CMMC Correctly: Avoid Audit Failures, Over-Scoping, and Cloud Risks
Submit any questions you would like answered on the podcast! Is your CMMC scope setting you up for success—or failure? In this episode of the CMMC Compliance…
CMMC Compliance GuideWhat You Missed at CEIC West 2025: CMMC Culture, AI Labeling, and Subcontractor Risks
Submit any questions you would like answered on the podcast! Missed CEIC West 2025 in Las Vegas? We’ve got your insider recap. In this episode of the CMMC…
CMMC Compliance GuideHow to Identify and Fix Your NIST 800-171 Weak Spots
Submit any questions you would like answered on the podcast! Are you sure you're NIST 800-171 compliant? In this episode of the CMMC Compliance Guide Podcast…
CMMC Compliance GuideCMMC Day 2025 Recap: Key Takeaways, Real-World Mistakes & What SMBs Must Fix Now
Submit any questions you would like answered on the podcast! Get the latest insider takeaways from CMMC Day 2025 straight from Washington D.C. In this episode…
CMMC Compliance GuideDecoding NIST 800-171: Your Plain English Path to CMMC Level 2 Compliance
Submit any questions you would like answered on the podcast! Feeling overwhelmed by CMMC compliance and NIST 800-171’s 110 controls? You’re not alone — but you…
CMMC Compliance GuideHow to Improve Your SPRS Score Before It Costs You Contracts
Submit any questions you would like answered on the podcast! Is your SPRS score putting your DoD contracts at risk? In this episode of the CMMC Compliance…