PODCAST · government
CMMC Brief
by Carolina Clear Tech, LLC
Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact for DIB contractors, compliance managers, and the MSPs and consultants who support them. From Carolina Clear Tech.
Episodes
-
2026-10-24: A reported Honeywell Aerospace settlement underscores the need to substantiate cybersecurity
Show Notes - 2026-10-24 Stories Covered: - Today: (https://federalnewsnetwork.com/cybersecurity/2026/10/cybersecurity-liability-doesnt-necessarily-start-with-a-breach/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-24/
-
2026-10-23: U.S
Show Notes - 2026-10-23 Stories Covered: - Today: (https://defensescoop.com/2026/10/22/socom-paas-integrated-contracting-vehicle/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-23/
-
2026-10-22: A rehearing brief in Anthropic's Pentagon dispute is a reason to review AI supplier dependencies
Show Notes - 2026-10-22 Stories Covered: - Today: (https://media.cadc.uscourts.gov/opinions/docs/2026/09/26-1049-2194984.pdf) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-22/
-
2026-10-21: Keep self-assessment evidence current during the paused third-party phase-in
Show Notes - 2026-10-21 Stories Covered: - Today: - Separate the phase-in pause from the obligation to protect information. - Policy status: current Department program guidance. (https://dodcio.defense.gov/cmmc/About/) - A score submission is not proof that a prime validated the implementation. -...
-
2026-10-20: Keep Phase I self-assessment work and applicable contract safeguards funded while checking the
Show Notes - 2026-10-20 Stories Covered: - Today: (https://business.defense.gov/Engage/News/Newsfeed-Repository/Article/4542563/forging-the-arsenal-of-freedom-department-of-war-suspends-cmmc-phase-ii-require/) - Action:...
-
2026-10-17: NIST & Standards
Show Notes - 2026-10-17 Stories Covered: - October 17, 2026: (https://csrc.nist.gov/pubs/sp/800/171/r3/final) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-17/
-
2026-10-16: Policy & Rulemaking
Show Notes - 2026-10-16 Stories Covered: - October 16, 2026: (https://dodcio.defense.gov/CMMC/Policy/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-16/
-
2026-10-14: DoD's (DoW's) Oct 1 implementation memo on cost transparency clarifies that contractors are not
Show Notes - 2026-10-14 Stories Covered: - Today: (https://www.pilieromazza.com/dows-new-cost-and-pricing-transparency-memo-key-considerations-for-defense-contractors-and-suppliers/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-14/
-
2026-10-13: A Reddit thread clarifies SPRS visibility rules for primes (they cannot see supplier scores
Show Notes - 2026-10-13 Stories Covered: - Today: - Primes cannot see supplier SPRS scores directly; they must request them. (https://www.reddit.com/r/CMMC/comments/1x4ew41/can_primes_see_a_suppliers_sprs_score_or_do_you/) - Army announces "manufacturing rodeo" supply-chain stress test for early...
-
2026-10-12: Defense contractors on Reddit are navigating CAD outsourcing proof points for CUI projects
Show Notes - 2026-10-12 Stories Covered: - Today: - Reddit marketplace questions show contractors wrestling with proof and scope during the CMMC suspension. (https://www.reddit.com/r/CMMC/comments/1x1dczc/what_cad_outsourcing_companies_work_with/) - FIPS requirements for physical access control…
more -
2026-10-10: No signed policy or enforcement news landed in this batch
Show Notes - 2026-10-10 Stories Covered: - Today: (https://federalnewsnetwork.com/cybersecurity/2026/10/in-preparing-for-pqc-agencies-must-ensure-integration-with-smart-identity-cards/) - Skipped sections: Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-10/
-
2026-10-09: No signed policy, enforcement action, or Cyber AB statement landed in today's feed
Show Notes - 2026-10-09 Stories Covered: - Today: (https://federalnewsnetwork.com/artificial-intelligence/2026/10/lawmakers-eye-more-federal-action-on-ai-standards-security-disclosures/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-10-09/
-
2026-10-07: NIST's AI Accelerator director addressed post-deployment drift monitoring for generative AI
Show Notes - 2026-10-07 Stories Covered: - Today: - What to do: (https://federalnewsnetwork.com/artificial-intelligence/2026/10/5-questions-with-nists-kat-megas-on-ai-cybersecurity-and-managing-risk/) - What to do:...
-
2026-10-06: A practitioner webinar confirmed that 89% of polled DIB organizations are pressing ahead with CMMC
Show Notes - 2026-10-06 Stories Covered: - Today: - No new signed policy or rulemaking actions today. - Action: - No new cyber-related False Claims Act (FCA) cases this cycle. - Standing reminder: - Action: - MSP completes voluntary Level 2 C3PAO certification....
-
2026-10-05: PreVeil announced a free virtual CMMC summit (Oct 28) featuring the SP 800-171 author
Show Notes - 2026-10-05 Stories Covered: - Today: - PreVeil CMMC Security Summit scheduled for Oct 28 (virtual, free) (https://www.preveil.com/blog/top-cybersecurity-events/) - On Oct 2, a Reddit user reported a two-year, high-cost NIST 800-171 effort derailed by MSP failure...
-
2026-10-02: No new CMMC-specific rulemaking or enforcement actions landed today
Show Notes - 2026-10-02 Stories Covered: - Today: - DoD Proposed Rule Would Expand FOCI Reporting for Cleared Contractors. (https://www.pilieromazza.com/weekly-update-for-government-contractors-and-commercial-businesses-october-1-2026/) - Watch item: - DISA Sole-Sources Combatant Command…
more -
2026-10-01: No new CMMC policy actions or cyber-related False Claims Act cases dropped today
Show Notes - 2026-10-01 Stories Covered: - Today: - Action: (https://www.justice.gov/opa/pr/signal-diagnostics-agrees-pay-over-20m-settle-false-claims-act-allegations-failing-refund) - Action…
more -
2026-09-30: NIST post-quantum cryptography standards continue driving federal migration timelines that will
Show Notes - 2026-09-30 Stories Covered: - Today: - CIRCIA final rule expected this fall, with harmonization focus. (https://federalnewsnetwork.com/cybersecurity/2026/09/white-house-cyber-leader-says-circia-will-harmonize-incident-reporting/) - Post-quantum cryptography migration is now an...
-
2026-09-29: A Defense Manpower Data Center breach exposed 3 million records
Show Notes - 2026-09-29 Stories Covered: - Today: - CCP and CCA certifications during the suspension. (https://www.reddit.com/r/CMMC/comments/1wshy64/current_worth_of_ccp/) - GRC platform selection. (https://www.reddit.com/r/CMMC/comments/1wsl9a4/best_grcs/) - Session lock implementation…
more -
2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2
Show Notes - 2026-09-26 Stories Covered: - Today: - Former CMMC Leaders Publish Defense of Program During Suspension (https://federalnewsnetwork.com/commentary/2026/09/what-is-defending-our-warfighters-actually-worth-2/) - IG Report: 86% of Agencies Missed CISA Cloud Security Deadlines; CISA…
more -
2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on
Show Notes - 2026-09-25 Stories Covered: - Today: - DoD moves to replace Cost Accounting Standards with GAAP. (https://www.pilieromazza.com/weekly-update-for-government-contractors-and-commercial-businesses-september-24-2026/) - Revolutionary FAR Overhaul: comment period open....
-
2026-09-24: No policy developments, enforcement actions, or ecosystem announcements
Show Notes - 2026-09-24 Stories Covered: - Today: - CAD vendor certification requirements for CUI handling. (https://www.reddit.com/r/CMMC/comments/1wov7m3/what_certifications_should_a_cad_outsourcing/) - Katie Arrington calls CMMC pause "negligent" in podcast appearance....
-
2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation
Show Notes - 2026-09-23 Stories Covered: - Today: - Proposed NDAA "Right to Repair" Provisions Would Default Contractor Technical Data to Government Purpose Rights...
-
2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public)
Show Notes - 2026-09-22 Stories Covered: - Today: - CMMC Reform Task Force submitted its report; recommendations not yet public. (https://www.insidegovernmentcontracts.com/2026/09/cmmc-reform-task-force-updates-september-2026/) - What to do: - DoW issued a broad acquisition reform memo targeting...
-
2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB
Show Notes - 2026-09-21 Stories Covered: - Today: - Open-CMMC v2.0 extends CUI workflow protection to OT systems (https://www.reddit.com/r/CMMC/comments/1wlyjvv/opencmmc_v20_extending_protection_of_cui_workflow/) - Contractor reports passing third-party Level 2 CMMC assessment...
-
2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory
Show Notes - 2026-09-19 Stories Covered: - Today: - DOJ revises Justice Manual to limit False Claims Act enforcement to binding legal obligations. (https://www.justice.gov/opa/pr/doj-revises-justice-manual-strengthen-false-claims-act-enforcement) - Illegal alien arrested for fraudulent U.S....
-
2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under
Show Notes - 2026-09-18 Stories Covered: - Today: - ISOO Releases CUI Notices 2026-07 and 2026-08: Agencies Must Give Contractors Explicit CUI Handling Guidance - Action:...
-
2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation
Show Notes - 2026-09-17 Stories Covered: - Today: - CIRCIA Final Rule Expected This Month; DIB Contractors Face Overlapping Reporting Obligations (https://federalnewsnetwork.com/commentary/2026/09/beyond-the-town-halls-getting-ready-for-circia-before-the-clock-starts-ticking/) - New FCA...
-
2026-09-16: DoD's new class deviation confirms baseline DFARS 7012 and NIST 800-171 Rev 2 compliance remain
Show Notes - 2026-09-16 Stories Covered: - Today: (https://federalnewsnetwork.com/cybersecurity/2026/09/as-the-pentagon-rethinks-cmmc-cybersecurity-isnt-pausing/) - What remains mandatory: - What is suspended: - Action: - Watch: - C3PAO demand during the pause:...
-
2026-09-15: Cyber AB CEO Matthew Travis outlined reform proposals including continuous monitoring and smaller
Show Notes - 2026-09-15 Stories Covered: - Today: - Cyber AB submits reform recommendations to DoW Reform Task Force (https://federalnewsnetwork.com/technology-main/2026/09/cyber-abs-matt-travis-on-cmmc-reform/) - DoW Class Deviation Revision 3 retains Phase 2 suspension, adds new clauses...
-
2026-09-12: Honeywell settled a $2M False Claims Act case for failing to implement NIST 800-171 controls on a
Show Notes - 2026-09-12 Stories Covered: - Today: - 60-Day Suspension Review Period Ends, No Public Guidance Yet (https://www.reddit.com/r/CMMC/comments/1wdgf8n/60day_pause_completion/) - White House Quantum Executive Orders Set PQC Migration Deadlines...
-
2026-09-05: No CMMC-specific policy, enforcement, or rulemaking developments today
Show Notes - 2026-09-05 Stories Covered: - Today: - Executive Order 14421: Bulk-Power System Supply Chain Security (Signed, Aug. 26, 2026)...
-
2026-08-26: No policy, rulemaking, or enforcement developments
Show Notes - 2026-08-26 Stories Covered: - Today: - Compliance cost benchmarks now public. (https://summit7.us/blog/real-numbers-real-budgets-what-insourcing-cmmc-compliance-really-costs/) - What to do: - CMMC jargon guide published....
-
2026-08-25: The Navy stood up a new Office of the Defense Industrial Base to revitalize maritime supply chains
Show Notes - 2026-08-25 Stories Covered: - Today: - Navy creates Office of the Defense Industrial Base to accelerate dual-use tech and supply chain resilience. (https://defensescoop.com/2026/08/24/navy-launches-office-of-the-defense-industrial-base/) - What to do: - GSA updates FICAM architecture...
-
2026-08-22: The FAR CUI proposed rule mandating NIST SP 800-171 rev 3 across all federal contracts is expected
Show Notes - 2026-08-22 Stories Covered: - Today: - FAR CUI Rule: Government-Wide NIST 800-171 Rev 3 Mandate Coming Before Year-End - Action required: (https://summit7.us/blog/far-cui-rule-major-hurdle/) - Virginia Company Pays $2.5M to Settle PPP Fraud Allegations...
-
2026-08-15: The r/CMMC community is working through FIPS 140-3 validation requirements and GCC-High migration
Show Notes - 2026-08-15 Stories Covered: - Today: - FIPS 140-3 Validation: What DIB Contractors Need to Know (https://www.reddit.com/r/CMMC/comments/1vo5fno/fips_1403_basic_questions/) - Action: - Commercial-to-GCC-High Migration: Practitioner War Stories...
-
2026-08-09: DoW CIO Kirsten Davies signaled at Black Hat that the Phase 2 hold may be termed a "pause" rather
Show Notes - 2026-08-09 Stories Covered: - Today: (https://www.reddit.com/r/CMMC/comments/1vi8y0m/were_curious/) - Action item: - VOIP voicemail and FedRAMP scope creep. (https://www.reddit.com/r/CMMC/comments/1vi2wm6/voip/) - GCC High migration economics....
-
2026-08-08: A Federal News Network interview with early CMMC Level 2 adopter IntelliGenesis highlights the real
Show Notes - 2026-08-08 Stories Covered: - Today: (https://www.insidegovernmentcontracts.com/2026/08/dsca-expands-fmf-eligibility-for-direct-commercial-contracts/) Full brief: https://carolinacleartech.com/cmmc-brief/2026-08-08/
-
2026-08-07: No new CMMC rulemaking or enforcement actions dropped today
Show Notes - 2026-08-07 Stories Covered: - Today: - What to do: (https://defensescoop.com/2026/08/06/air-force-portfolio-executives-acquisition-reform/) - What to do: (https://www.pilieromazza.com/weekly-update-for-government-contractors-and-commercial-businesses-august-6-2026/) - What to do:...
-
2026-08-06: No new CMMC policy actions, enforcement cases, or standards updates surfaced in today's collection
Show Notes - 2026-08-06 Stories Covered: - Today: (https://summit7.us/blog/summit-7-ranks-37-solution-provider-on-2026-crn-fast-growth-150-list/) - Bottom line: Full brief: https://carolinacleartech.com/cmmc-brief/2026-08-06/
-
2026-08-04: Practitioners report confusion about Level 2 self-assessment vs C3PAO timelines during the
Show Notes - 2026-08-04 Stories Covered: - Today: (https://federalnewsnetwork.com/congress/2026/08/senate-stopgap-extends-key-cyber-authorities-tmf/) - Default termination burden...
-
2026-08-01: DoD raised the TINA certified cost/pricing data threshold to $10M effective July 1
Show Notes - 2026-08-01 Stories Covered: - Today: - DoD IT Category Management Directive (DoW Instruction 8000.02) Takes Effect (https://defensescoop.com/2026/07/31/dod-cio-directive-itcm-kirsten-davies/) - Chinese Military Company Covered Lobbyist Prohibition: DoD Publishes Guidance...
-
2026-07-31: A new Executive Order requires defense prime contractors and subcontractors at every tier to map
Show Notes - 2026-07-31 Stories Covered: - Today: - Executive Order: Securing America's Defense Supply Chains (Signed July 20, 2026) (https://www.pilieromazza.com/weekly-update-for-government-contractors-and-commercial-businesses-july-30-2026/) - Post-Quantum Cryptography Migration Timelines...
-
2026-07-30: A practitioner shared a detailed CMMC-CCP exam pass/fail breakdown on Reddit that surfaces real
Show Notes - 2026-07-30 Stories Covered: - Today: - CMMC-CCP Exam: First-Hand Pass/Fail Breakdown Reveals Study Gaps (https://www.reddit.com/r/CMMC/comments/1vah182/failed_cmmcccp_the_first_time_passed_on_my_second/) - Summit 7 Dissects "Brilliant at the Basics" for DIB Contractors...
-
2026-07-29: Federal agencies are debating whether commercial technology acquisition policies can coexist with
Show Notes - 2026-07-29 Stories Covered: - Today: - CUI requirements creating commercial technology access tension across federal agencies. (https://federalnewsnetwork.com/contracting/2026/07/the-debate-over-cui-is-revealing-a-larger-struggle-over-how-government-buys-technology/) - What to do: -...
-
2026-07-28: The CMMC suspension continues to drive confusion among practitioners preparing for presentations
Show Notes - 2026-07-28 Stories Covered: - Today: - Quantum Computing Executive Orders Set 2031 PQC Migration Deadline (https://federalnewsnetwork.com/commentary/2026/07/analyzing-the-new-quantum-computing-executive-orders-what-they-got-right-and-whats-still-missing/) - Claim Sponsorship in…
more -
2026-07-25: Summit 7 published MSP vs MSSP guidance for CMMC contractors
Show Notes - 2026-07-25 Stories Covered: - Today: - MSP vs MSSP: different roles, both needed for CMMC (https://summit7.us/blog/msps-vs-mssps-why-each-matters-for-cmmc-compliance/) - Action: - No CMMC-specific policy developments today. - CISA accelerates vulnerability patching after AI exploit...
-
2026-07-24: DoD suspended CMMC Phase 2 third-party assessment requirements pending a Reform Task Force review
Show Notes - 2026-07-24 Stories Covered: - Today: - DoD suspended CMMC Phase 2 C3PAO requirements (signed policy). (https://www.preveil.com/blog/cmmc-clarified-webinar-recap/) - SBA commended the suspension after small-business pressure (signed policy)....
-
2026-07-23: The Phase II suspension memo continues to ripple through the procurement landscape
Show Notes - 2026-07-23 Stories Covered: - Today: - CMMC Phase II Suspended, Reform Task Force Launched (Signed Memo, Memo 26-P-1023, July 13, 2026)...
-
2026-07-22: Federal News Network interviews confirm DoD's CMMC Phase 2 suspension changes nothing about
Show Notes - 2026-07-22 Stories Covered: - Today: - CMMC Phase 2 suspended, but 800-171 obligations unchanged (task force review, not a repeal). (https://federalnewsnetwork.com/contracting/2026/07/dod-pauses-cmmc-but-contractors-still-have-obligations/) - Action: - RFI comments due August 14....
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact for DIB contractors, compliance managers, and the MSPs and consultants who support them. From Carolina Clear Tech.
HOSTED BY
Carolina Clear Tech, LLC
CATEGORIES
Loading similar podcasts...