NIST SP 800-171
-
CMMC's First Step Is Broken — The Pentagon Still Can't Mark Its Own Data
CMMC's biggest cost driver is not the audit but the Pentagon's decade-long failure to mark its own CUI. Two inspector general reports say the contractors are right.
-
CMMC Phase 2 Suspension: The Compliance Pause That Raised Contractor Risk
The Department of War paused third-party CMMC certification but left self-attestation live, concentrating False Claims Act exposure exactly where DOJ is scaling enforcement.