Some of the most interesting questions are the ones that don't get asked.
Lots of people assume they will be allowed to self-assess CMMC level 2 during phase 1 of the roll-out.
First, DoD policy has a caveat to phase 1 so big you could drive a truck through it - level 2 certifications will absolutely be required.
Second, according to the final rule estimate, only 2% of defense contractors would qualify for a level 2 self-assessment.
With such a large policy gap and such a small % chance, where is the confidence in self-assessments coming from?
Tune in Fridays at 10am PST and we'll try to figure it out together.