CMMC Brief

CMMC Brief

By Carolina Clear Tech, LLCGovernment
Download on the App Store

CMMC Brief episodes

  • 2026-09-29: A Defense Manpower Data Center breach exposed 3 million records
    Show Notes - 2026-09-29
    Stories Covered
    • Today:
    • CCP and CCA certifications during the suspension. [Practitioner Pulse]
    • GRC platform selection. [Practitioner Pulse]
    • Session lock implementation (3.1.11). [Practitioner Pulse]
    • DMDC data breach: 3 million records exposed. [NIST & Standards]
    • OpenAI agents probed government sites unexpectedly. [NIST & Standards]

      • Read the full brief

      6 min
    • 2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2
      Show Notes - 2026-09-26
      Stories Covered
      • Today:
      • Former CMMC Leaders Publish Defense of Program During Suspension [Policy & Rulemaking]
      • IG Report: 86% of Agencies Missed CISA Cloud Security Deadlines; CISA Cannot Enforce Its Own Directives [NIST & Standards]
      • Former Soldier Sentenced to 70 Months for Telecom Hacking and Extortion [Enforcement & False Claims]
      • Contractors Openly Abandoning Compliance During Suspension [Practitioner Pulse]

        • Read the full brief

        7 min
      • 2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on
        Show Notes - 2026-09-25
        Stories Covered
        • Today:
        • DoD moves to replace Cost Accounting Standards with GAAP. [Policy & Rulemaking]
        • Revolutionary FAR Overhaul: comment period open. [Policy & Rulemaking]
        • SBA extends comment period on size standard overhaul to November 20. [Policy & Rulemaking]
        • First court dismissal of an FCA cybersecurity complaint on materiality grounds. [Enforcement & False Claims]
        • What this means during the CMMC suspension: [Enforcement & False Claims]
        • BEC recovery: $375,000 seized. [Enforcement & False Claims]
        • GSA SAM.gov glitch: validate your small business representations now. [Contracting Impact]
        • Navy MUSV marketplace expanding. [Contracting Impact]
        • GAO protest dismissed as sanction for fabricated facts. [Contracting Impact]
        • Boundary scoping for FedRAMP Moderate cloud tools. [Practitioner Pulse]

          • Read the full brief

          8 min
        • 2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation
          Show Notes - 2026-09-23
          Stories Covered
          • Today:
          • Proposed NDAA "Right to Repair" Provisions Would Default Contractor Technical Data to Government Purpose Rights [Policy & Rulemaking]
          • SBA Extends Comment Period on Small Business Size Standards to November 20 [Policy & Rulemaking]
          • Federal News Network: The Hidden FCA Trap in CMMC Self-Attestation [Enforcement & False Claims]
          • RYUK Ransomware Operator Sentenced to Federal Prison [Enforcement & False Claims]
          • Data Rights Legislation Bears Watching for Subcontractors [Contracting Impact]
          • Thin Collection Day, but the Signal Is Clear [Practitioner Pulse]

            • Read the full brief

            8 min
          • 2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public)
            Show Notes - 2026-09-22
            Stories Covered
            • Today:
            • CMMC Reform Task Force submitted its report; recommendations not yet public. [Policy & Rulemaking]
            • What to do: [Policy & Rulemaking]
            • DoW issued a broad acquisition reform memo targeting CAS coverage, pricing, and administrative burden. [Policy & Rulemaking]
            • What to do: [Policy & Rulemaking]
            • Derived CUI workflow question: Do small parts extracted from Statement D blueprints require CUI handling? [Practitioner Pulse]
            • What to do: [Practitioner Pulse]

              • Read the full brief

              7 min
            • 2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB
              Show Notes - 2026-09-21
              Stories Covered
              • Today:
              • Open-CMMC v2.0 extends CUI workflow protection to OT systems [Practitioner Pulse]
              • Contractor reports passing third-party Level 2 CMMC assessment [Practitioner Pulse]
              • FCI scoping question: do assessors check FCI environments during Level 2 assessments? [Practitioner Pulse]
              • CCP exam passed, practitioner seeks CCA prep recommendations [Practitioner Pulse]

                • Read the full brief

                5 min
              • 2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory
                Show Notes - 2026-09-19
                Stories Covered
                • Today:
                • DOJ revises Justice Manual to limit False Claims Act enforcement to binding legal obligations. [Enforcement & False Claims]
                • Illegal alien arrested for fraudulent U.S. citizenship claims to secure aerospace contractor employment. [Enforcement & False Claims]
                • OFCCP eliminates Section 503 disability compliance requirements effective September 21. [Contracting Impact]
                • CISA and Five Eyes partners release CI Fortify guidance on network isolation for critical infrastructure. [NIST & Standards]
                • AAFES investigating suspicious messages sent via email and official mobile app. [Practitioner Pulse]

                  • Read the full brief

                  7 min
                • 2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under
                  Show Notes - 2026-09-18
                  Stories Covered
                  • Today:
                  • ISOO Releases CUI Notices 2026-07 and 2026-08: Agencies Must Give Contractors Explicit CUI Handling Guidance [Policy & Rulemaking]
                  • Action: [Policy & Rulemaking]
                  • Army Directive 2026-19: Commercial Software First [Policy & Rulemaking]
                  • Action: [Policy & Rulemaking]
                  • SBA Prioritizing Defense-Critical 8(a) Applicants [Policy & Rulemaking]
                  • Action: [Policy & Rulemaking]
                  • Ninth Circuit: Agencies Cannot Define FCA "Materiality" by Fiat (County of King v. Turner) [Enforcement & False Claims]
                  • Action: [Enforcement & False Claims]
                  • New FCA Cybersecurity Settlement Reported [Enforcement & False Claims]
                  • Action: [Enforcement & False Claims]
                  • CUI Scoping Gets Clearer (Ties to ISOO 2026-07) [NIST & Standards]
                  • Action: [NIST & Standards]
                  • CCP Exam Pass Report [Practitioner Pulse]
                  • 3.8.2 Media Access: USB Tracking Question [Practitioner Pulse]
                  • Funding Level 2 Compliance: The Cost Question [Practitioner Pulse]

                    • Read the full brief

                    10 min
                  • 2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation
                    Show Notes - 2026-09-17
                    Stories Covered
                    • Today:
                    • CIRCIA Final Rule Expected This Month; DIB Contractors Face Overlapping Reporting Obligations [Policy & Rulemaking]
                    • New FCA Cybersecurity Settlement Signals DOJ Keeps Foot on the Gas [Enforcement & False Claims]
                    • Former Army Soldier Pleads Guilty to Transmitting National Defense Information [Enforcement & False Claims]
                    • Air Force Stands Up 'Megatron' IDIQ for Battle Network Acquisitions [Contracting Impact]
                    • U.S.-India RDPA Negotiations Advancing; OCI Risks in GovCon M&A [Contracting Impact]
                    • CCA Exam Candidates Frustrated with Training Quality [Practitioner Pulse]

                      • Read the full brief

                      9 min

                    About CMMC Brief

                    From the publisher's feed

                    Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact…