In this episode of The Quality Hub: Chatting with ISO Experts, host Xavier Francis sits down with Rick Krick, Director of Security Solutions at Core Business Solutions, to discuss a monumental update — CMMC is now law. As of November 10, 2025, the Cybersecurity Maturity Model Certification (CMMC) becomes legally enforceable under the Defense Federal Acquisition Regulation Supplement (DFARS), transforming compliance from a policy into a contractual requirement for all Department of Defense contractors. Rick breaks down what this means for organizations of all sizes, from small businesses to major defense contractors, explaining the three CMMC levels, phased rollout timeline, and common misconceptions about compliance. Together, they explore the real-world implications for defense suppliers, the importance of early preparation, and how companies can protect sensitive information while staying contract-ready in this new cybersecurity landscape.

Helpful Resources:

What is CMMC?:  https://www.thecoresolution.com/nist-cmmc-3

CMMC Webinars: https://www.thecoresolution.com/cybersecurity-webinars

The Core Vault Solution: https://www.thecoresolution.com/core-vault

Contact us at 866.354.0300 or email us at [email protected]

A Plethora of Articles: https://www.thecoresolution.com/free-learning-resources