Defense Contractors are Betting Their Companies on THIS Assumption About CMMC Phase 1

Episode notes

A lot of defense contractors are betting that the DoD will only require CMMC Level 2 self-assessments during the first 12 months of CMMC ("Phase 1"). Since December 2024 there have been three official policies outlining what can be required in Phase 1 and none of them prohibit Level 2 certification assessments. Instead, every policy we can find reinforces the idea that many companies will be required to achieve CMMC Level 2 certification in Phase 1. In this episode we walk through all 3 policies so you can decide for yourself if that's a risk you want to take with your business. Summit 7 Live: Pathfinder 101: Pathfinder Demo: 32 CFR 170.3(e): The January Memo (PDF): The July Memo (PDF):

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CMMC Is an HR Problem, Not an Enclave Problem - Here's the ProofSecure Talk Podcast · on CMMC95 / 100
• Episode 128: Post Quantum CryptographyThe Azure Security Podcast · on NIST87 / 100
• Trump's Golden Post-Quantum EO(s)Security Cryptography Whatever · on NIST80 / 100
• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on CMMC79 / 100
• Rain Versus Flood, Making Sense of the 2026 CVE SurgeResilient Cyber · on NIST76 / 100
• The Evolution and Enforcement of CMMC with Jacob AndersonTrust Issues · on DFARS76 / 100

• The DoD's "Basic" Cybersecurity Isn't Basic at All93 / 100
• A Perfect SPRS Score Turned Into a $507K Settlement64 / 100
• The DoD Said This Was "Out of Scope"... Now They're Asking About It
• CMMC Phase 2 Is Suspended... So Why Is the DoD Still Assessing Contractors?
• CMMC Phase 2 Is Suspended... But Contractor Liability Just Went UP