Sum IT Up: CMMC News Roundup

The episode contains a handful of genuinely useful operational points - DFARS 7012 vs. CMMC distinction, SPRS submissions as official fraud triggers, and DibCAC medium assessment mechanics - but the same points are repeated multiple times across 13 minutes, diluted by sports analogies, sitcom references, and speculative filler.

“SPRS score submissions, folks, are official statements to the government. The second that you submit an invoice to get paid under those contracts, you have now committed fraud.”

“Medium assessments were typically done just over the phone. So the posture of this contractor specifically was allegedly so bad that Dibcac knew just over the phone that they were in gross violation”

The no-whistleblower, DibCAC-initiated FCA angle is a genuinely fresh data point and the prediction that dozens of similar cases will follow from medium assessments is a plausible and non-obvious thesis, but the underlying argument - 'don't lie on your SPRS score' - is well-worn in this space.

“There was no whistleblower in this case. uh dibcac conducted what was known as a medium assessment under the dod assessment methodology”

“I think there going to be a lot of these settlements that come out that don have a whistleblower They were the result of a DBCAC medium confidence assessment”

This is a two-host commentary format with no external guests; the hosts demonstrate apparent practitioner knowledge of CMMC and DFARS and reference prior conference presentations, but their specific credentials are never established and no outside expert is brought in to stress-test claims.

“We had Nick Del Rosso multiple years ago at CS2 that showed us the slide that this is the variance that we're seeing right now.”

“We covered years ago, a DOD IG note that came out during the holidays saying that DBCAC was actively referring cases to the Department of Justice”

The episode anchors concretely on the $507K settlement vs. $680K contract value, the 110-to-negative-170 score delta, specific DFARS clause numbers (7012, 7019, 7020), and a named DibCAC presenter (Nick Del Rosso at CS2), but the contractor itself is unnamed and most additional data is speculative ('dozens or a hundred or more cases').

“The contractor entered a perfect 110 self-assessment score into the SPRS database. Dibcac called them up in 2024, and it turns out their actual score was a negative 170. Now they're paying $507,000 to the government and the contracts that are in question were only worth 680 grand.”

“DFARS Clause 252-204-7019-7020. Those were the mechanisms that were making you conduct a self-assessment, calculate a score, and upload that score into the SPRS database.”

There is no guest to probe and no meaningful pushback between the two hosts; the conversation is largely one co-host affirming the other with affirmations like 'Yep. Yep.' and the probing is replaced by sports analogies and TV show references rather than sharp follow-up questions.

“It's like when you try to sneak a couple cookies and forget to get all the crumbs that are on your chin, right?”

“It's like that extra contributing player in a playoff run that helps the team get over the hump, right? Like the James Joneses of the world for the heat”