CMMC Brief

CMMC Brief

By Carolina Clear Tech, LLCGovernment
Download on the App Store

CMMC Brief episodes

  • 2026-08-01: DoD raised the TINA certified cost/pricing data threshold to $10M effective July 1
    Show Notes - 2026-08-01
    Stories Covered
    • Today:
    • DoD IT Category Management Directive (DoW Instruction 8000.02) Takes Effect [Policy & Rulemaking]
    • Chinese Military Company Covered Lobbyist Prohibition: DoD Publishes Guidance [Policy & Rulemaking]
    • $10 Million TINA Threshold Now in Force (As of July 1, 2026) [Contracting Impact]
    • Remote Worker Fraud: Foreign Actors and FCA Exposure for Contractors [Enforcement & False Claims]

      • Read the full brief

      7 min
    • 2026-07-31: A new Executive Order requires defense prime contractors and subcontractors at every tier to map
      Show Notes - 2026-07-31
      Stories Covered
      • Today:
      • Executive Order: Securing America's Defense Supply Chains (Signed July 20, 2026) [Policy & Rulemaking]
      • Post-Quantum Cryptography Migration Timelines Accelerate [Policy & Rulemaking]
      • Defense Supply Chain Mapping Will Create New Flow-Down Requirements [Contracting Impact]
      • House Passes $1.15T Defense Policy Bill (216-212) [Contracting Impact]
      • Micro-SMB Tooling for CMMC Compliance (r/CMMC) [Practitioner Pulse]
      • Two-Person LLC Struggling with Compliance Burden (r/CMMC) [Practitioner Pulse]
      • "CMMC at Sea" Training Cruise Draws Skepticism (r/CMMC) [Practitioner Pulse]
      • Tier 3 Background Investigation Delays (r/CMMC) [Practitioner Pulse]
      • CUI-Safe Meeting Notetakers (r/CMMC) [Practitioner Pulse]

        • Read the full brief

        10 min
      • 2026-07-29: Federal agencies are debating whether commercial technology acquisition policies can coexist with
        Show Notes - 2026-07-29
        Stories Covered
        • Today:
        • CUI requirements creating commercial technology access tension across federal agencies. [Policy & Rulemaking]
        • What to do: [Policy & Rulemaking]
        • CyberAB warns fraudulent Level 2 certifications are circulating, provides verification path. [Cyber AB & Ecosystem]
        • What to do: [Cyber AB & Ecosystem]
        • FIPS compliance confusion continues for CUI enclaves. [Practitioner Pulse]
        • Outbound firewall scoping questions for cloud-only GCC-High environments. [Practitioner Pulse]
        • CNC machine access control raises OT network CUI boundary questions. [Practitioner Pulse]
        • What these signal: [Practitioner Pulse]

          • Read the full brief

          7 min
        • 2026-07-28: The CMMC suspension continues to drive confusion among practitioners preparing for presentations
          Show Notes - 2026-07-28
          Stories Covered
          • Today:
          • Quantum Computing Executive Orders Set 2031 PQC Migration Deadline [Policy & Rulemaking]
          • Claim Sponsorship in Federal Subcontracts: What DIB Subs Need in Their Agreements [Contracting Impact]
          • International Contractors: CMMC Certification Is Available but Complicated [Practitioner Pulse]
          • Reddit: Consolidating Suspension Confusion for a Presentation [Practitioner Pulse]
          • Reddit: ChatGPT Enterprise FedRAMP Capability Questions [Practitioner Pulse]
          • Reddit: Town Hall Anticipation [Practitioner Pulse]

            • Read the full brief

            8 min
          • 2026-07-25: Summit 7 published MSP vs MSSP guidance for CMMC contractors
            Show Notes - 2026-07-25
            Stories Covered
            • Today:
            • MSP vs MSSP: different roles, both needed for CMMC [Practitioner Pulse]
            • Action: [Practitioner Pulse]
            • No CMMC-specific policy developments today. [Policy & Rulemaking]
            • CISA accelerates vulnerability patching after AI exploit incidents [NIST & Standards]
            • Action: [NIST & Standards]
            • FedRAMP 20X transition deadline: June 2027 [NIST & Standards]
            • Action: [NIST & Standards]
            • DIU appoints first active-duty military deputy to speed fielding [Contracting Impact]
            • Action: [Contracting Impact]
            • SOF launches same-day acquisition challenge [Contracting Impact]
            • Action: [Contracting Impact]
            • No new DIB-specific FCA settlements today. [Enforcement & False Claims]
            • No Cyber AB or C3PAO developments today. [Cyber AB & Ecosystem]

              • Read the full brief

              8 min
            • 2026-07-24: DoD suspended CMMC Phase 2 third-party assessment requirements pending a Reform Task Force review
              Show Notes - 2026-07-24
              Stories Covered
              • Today:
              • DoD suspended CMMC Phase 2 C3PAO requirements (signed policy). [Policy & Rulemaking]
              • SBA commended the suspension after small-business pressure (signed policy). [Policy & Rulemaking]
              • Trump EO mandates AI-assisted supply-chain mapping for all national-security acquisitions (signed policy). [Policy & Rulemaking]
              • DoD class deviation implements Chinese-military-company covered-lobbyist prohibition (signed policy, limited detail). [Policy & Rulemaking]
              • Federal News Network commentary argues for software-sovereignty requirements in defense procurement (opinion). [Policy & Rulemaking]
              • No cyber-related False Claims Act settlements today. [Enforcement & False Claims]
              • No Cyber AB or C3PAO announcements today. [Cyber AB & Ecosystem]
              • No NIST 800-171/172 revisions today. [NIST & Standards]
              • Contracting officers began inserting CMMC requirements in Q4 2025, then suspended C3PAO designations in July 2026 (signed policy). [Contracting Impact]
              • Scoping, documentation, and MSPs are the assessment killers (practitioner analysis). [Practitioner Pulse]

                • Read the full brief

                10 min

              About CMMC Brief

              From the publisher's feed

              Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact…