The U.S. Department of Defense (DoD) is rolling out a new cybersecurity program to help protect sensitive information across the defense supply chain. The new program is called the Cybersecurity Maturity Model Certification (CMMC), which leverages security controls from FAR 52.204-21, NIST SP 800-171 and NIST SP 800-172. An ecosystem is being developed to help organizations within the defense industrial base (DIB) establish the controls and prepare for assessments. We explore the CMMC with special guest, Leia Shilobod.