All Episodes
CMMC Brief — 54 episodes
2026-10-24: A reported Honeywell Aerospace settlement underscores the need to substantiate cybersecurity
2026-10-23: U.S
2026-10-22: A rehearing brief in Anthropic's Pentagon dispute is a reason to review AI supplier dependencies
2026-10-21: Keep self-assessment evidence current during the paused third-party phase-in
2026-10-20: Keep Phase I self-assessment work and applicable contract safeguards funded while checking the
2026-10-17: NIST & Standards
2026-10-16: Policy & Rulemaking
2026-10-14: DoD's (DoW's) Oct 1 implementation memo on cost transparency clarifies that contractors are not
2026-10-13: A Reddit thread clarifies SPRS visibility rules for primes (they cannot see supplier scores
2026-10-12: Defense contractors on Reddit are navigating CAD outsourcing proof points for CUI projects
2026-10-10: No signed policy or enforcement news landed in this batch
2026-10-09: No signed policy, enforcement action, or Cyber AB statement landed in today's feed
2026-10-07: NIST's AI Accelerator director addressed post-deployment drift monitoring for generative AI
2026-10-06: A practitioner webinar confirmed that 89% of polled DIB organizations are pressing ahead with CMMC
2026-10-05: PreVeil announced a free virtual CMMC summit (Oct 28) featuring the SP 800-171 author
2026-10-02: No new CMMC-specific rulemaking or enforcement actions landed today
2026-10-01: No new CMMC policy actions or cyber-related False Claims Act cases dropped today
2026-09-30: NIST post-quantum cryptography standards continue driving federal migration timelines that will
2026-09-29: A Defense Manpower Data Center breach exposed 3 million records
2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2
2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on
2026-09-24: No policy developments, enforcement actions, or ecosystem announcements
2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation
2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public)
2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB
2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory
2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under
2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation
2026-09-16: DoD's new class deviation confirms baseline DFARS 7012 and NIST 800-171 Rev 2 compliance remain
2026-09-15: Cyber AB CEO Matthew Travis outlined reform proposals including continuous monitoring and smaller
2026-09-12: Honeywell settled a $2M False Claims Act case for failing to implement NIST 800-171 controls on a
2026-09-05: No CMMC-specific policy, enforcement, or rulemaking developments today
2026-08-26: No policy, rulemaking, or enforcement developments
2026-08-25: The Navy stood up a new Office of the Defense Industrial Base to revitalize maritime supply chains
2026-08-22: The FAR CUI proposed rule mandating NIST SP 800-171 rev 3 across all federal contracts is expected
2026-08-15: The r/CMMC community is working through FIPS 140-3 validation requirements and GCC-High migration
2026-08-09: DoW CIO Kirsten Davies signaled at Black Hat that the Phase 2 hold may be termed a "pause" rather
2026-08-08: A Federal News Network interview with early CMMC Level 2 adopter IntelliGenesis highlights the real
2026-08-07: No new CMMC rulemaking or enforcement actions dropped today
2026-08-06: No new CMMC policy actions, enforcement cases, or standards updates surfaced in today's collection
2026-08-04: Practitioners report confusion about Level 2 self-assessment vs C3PAO timelines during the
2026-08-01: DoD raised the TINA certified cost/pricing data threshold to $10M effective July 1
2026-07-31: A new Executive Order requires defense prime contractors and subcontractors at every tier to map
2026-07-30: A practitioner shared a detailed CMMC-CCP exam pass/fail breakdown on Reddit that surfaces real
2026-07-29: Federal agencies are debating whether commercial technology acquisition policies can coexist with
2026-07-28: The CMMC suspension continues to drive confusion among practitioners preparing for presentations
2026-07-25: Summit 7 published MSP vs MSSP guidance for CMMC contractors
2026-07-24: DoD suspended CMMC Phase 2 third-party assessment requirements pending a Reform Task Force review
2026-07-23: The Phase II suspension memo continues to ripple through the procurement landscape
2026-07-22: Federal News Network interviews confirm DoD's CMMC Phase 2 suspension changes nothing about
2026-07-21: Summit 7 released implementation guidance on managed CUI enclaves as the fastest CMMC compliance
2026-07-18: The CMMC Reform Task Force held its first meeting Thursday and will report by late September
2026-07-17: No CMMC, DFARS cybersecurity, or defense industrial base compliance developments reported in
2026-07-16: DoD issued a formal RFI on SAM.gov seeking industry input on what replaces the paused CMMC Phase 2