This week we sit down with a C3PAO who has completed over 100 CMMC Level 2 assessments. We chat cost, timeframe, assessor backlogs and the most common issues facing defense contractors. 
 
Register for Summit 7 Live: https://www.summit7.us/s7live 
 
GAO Report (2026): https://www.gao.gov/products/gao-26-107955 
 
GAO Report (2021): https://www.gao.gov/products/gao-22-104679

NIST 800-171 rev. 3 is Coming ... But Not How You Think

It's difficult to keep up with all of the moving parts that make up the Department of Defense's Cybersecurity Maturity Model Certification Program. It's even more difficult to keep up with the relevant bits and bites that influence CMMC. This weekly podcast sums up the news and developments relevant to CMMC; DFARS and other regulations; and NIST standards such as SP 800-171, SP 800-53, the NIST Cybersecurity Framework, and others. 