Host Regis DeVeaux interviews Judy Bradt, CEO of Summit Insight, on why federal contractors must move beyond small business certifications as “borrowed advantage” and instead articulate the enduring value and outcomes they deliver. Judy explains that certifications help vendors get to award but don’t keep them there, and she urges companies to lead with clearly defined capabilities, differentiators, and results. She shares a three-part framework: focus, connection, and consistency, and breaks down the five key relationship layers in the federal space, from end users and contracting officers to small business specialists, primes, and high-level stakeholders. The discussion also explores resilience in sales, reframing rejection as “not right now,” and how human connection and empathy underpin long-term success in federal contracting, cybersecurity, and CMMC-related work.

Takeaways:

1. Certifications are a borrowed advantage - set-asides and small business labels help you get to contract award, but they don’t keep you there; enduring advantage comes from the value, outcomes, and trust you deliver over time.
2. Win with focus, connection, and consistency - choose your market based on data, build relationships across all five federal roles (end users, contracting, small business office, primes, stakeholders), and show up regularly with real value.
3. Rejection isn’t the end; it’s information - “no” usually means “not right now,” and the silence between responses is where strong sellers learn, adjust, and deepen relationships instead of walking away.

 Quotes:

1. “If you build it, they will only happen in the movies.” 
2. “What problem do you solve, and who do you solve it for? Because when somebody has introduced themselves by listing their certifications, I haven’t learned anything about what they do.”
3. “If you serve all, then you serve no one. You must choose, and choose with confidence where you’re going to be spending over 80% of your outbound relationship building and time and effort.” 

Timeline:

00:00 Borrowed Advantage vs. Enduring Advantage

02:15 Judy Bratt’s 38 Years in Federal Contracting

04:10 Why Leading with Certifications Falls Short

07:05 What Federal Buyers Really Want to Hear

10:20 Defining “Borrowed Advantage” in Government Contracting

13:05 Defining “Enduring Advantage” and Why It Matters

16:10 Using Certifications Without Letting Them Define You

19:00 Best Values: Quantifiable, Verifiable Differentiators

22:15 Building Everyday Value Through Micro-Purchases

25:30 The Three Pillars: Focus, Connection, Consistency

29:10 How to Focus Using Federal Contract Data

32:30 The Five Federal Relationship Layers Explained

37:10 The Danger of “Unearned Introductions” to Stakeholders

41:00 Handling Rejection and Silence in Federal Sales

45:00 Mindset, Resilience, and Long-Game Relationship Building

48:00 How to Learn More About Borrowed vs. Enduring Advantage 

Conclusion:

A sustainable federal contracting strategy can’t rest on certifications alone; it has to be built on the enduring advantage of clearly defined value, proven outcomes, and trusted relationships. Judy Brat’s framework of focus, connection, and consistency shows contractors exactly where to aim their efforts, who they truly need to build relationships with, and how to keep showing up with value over the long sales cycle. By shifting from “we’re 8(a), woman-owned, HUBZone” to “here’s the problem we solve and the mission outcomes we improve,” companies position themselves to win, perform, and re-win work even as rules and programs change. Contractors who embrace this mindset and learn to see “no” as “not right now” will keep growing in federal, cybersecurity, and CMMC-driven markets.

CMMC Phase 2 is paused, but NIST SP 800‑171, DFARS 7012, and Phase 1 self‑assessments are still fully in force, so contractors cannot treat CMMC as “over.” Derrich Phillips explains that third‑party C3PAO assessments are likely to remain a core part of the ecosystem and that Level 2 certification is already a competitive advantage with primes and the DoD. A defensible SPRS score requires a detailed System Security Plan, adequate and sufficient evidence, and tight alignment between written policies, staff behavior, and technical configurations. Small and midsize contractors often struggle with scoping (over‑including systems and users, creating a costly “CMMC tax”) and with treating CMMC as a checkbox rather than a culture shift built on training, incident response planning, and continuous improvement. Derek recommends that unprepared orgs urgently fix scope and cloud usage, “paper‑thin” orgs shore up POA&Ms and evidence with expert help, and nearly‑ready orgs move ahead with Level 2 certification to gain ground while others stall during the pause. 

Takeaways: 

1. CMMC Pause: What Actually Changed (and What Didn’t) 
2. Defensible SPRS Scores and the Real Compliance Burden 
3. Smart Scoping, Culture Shift, and Using Level 2 as a Competitive Edge 

Quotes:

1. “Checking your own homework self‑attestation is not a viable path forward to securing national security and sensitive information.” 
2. “Your system security plan tells your compliance story; it can’t be a three‑page document if you’re trying to address 110 requirements and 320 assessment objectives.” 
3. “Our adversaries aren’t pausing, so if you pause your CMMC efforts now, you’re going to pay a much higher price trying to regain that momentum later.” 

Conclusion: 

CMMC’s Phase 2 pause might have rattled the headlines, but Derrich Phillips makes it clear that the real obligations, risks, and opportunities for defense contractors haven’t gone anywhere. The organizations that treat this period as extra runway, tightening scope, hardening their SPRS story, and building a true security culture will be the ones primes and the DoD trust most when the dust settles. Rather than waiting for perfect clarity from Washington, Derek’s guidance is to keep moving: get your environment compliant, your evidence defensible, and, if you’re close, push through to Level 2. The pause is temporary; the need to safeguard national security data is permanent.