Weekly CMMC Q&A: 4.17.26

Weekly CMMC Q&A: 4.24.26

We're back from CS5 so this week we'll be stepping through a ton of questions we got from the event and, like always, anything that comes up during the livestream.

Weekly CMMC Q&A: 4.17.26

The Summit 7 Compliance Team has helped more than 90 companies achieve CMMC Level 2 certification. This week on a special edition of the hotline you'll get a chance to ask them anything. - Best indicators of success? - Craziest thing to ever come out of an assessor's mouth? - Pineapple on pizza? See you Friday at 1pm EST.

Weekly CMMC Q&A: 4.10.26

There are no deadlines in the CMMC Phased Roll-out. "When do I need CMMC?" depends entirely on your customer and the data you'll be handling. NAVFAC SW says November 2026. PCS JTF says Spring 2027. Some SOCOM support contracts say you don't need to achieve status until six months *after* award. That's blatantly against policy, but the DoD isn't a monolith. It all depends on your specific situation. If you have questions about your specific situation, come hang out with us Fridays at 10am PST when we answer your questions live.

Weekly CMMC Q&A: 4.3.26

Just because something sounds like it should be CUI doesn't make it so. Unclassified data is only controlled if a law, regulation, or government-wide policy specifically says that data must be, well, controlled. Sometimes there are dozens of "authorities" related to the same type of data so the CUI Registry summarizes and describes each category very broadly. Even though those descriptions might talk about "vulnerability information" in general, the summary doesn't make all vulnerability information controlled. You have to read the specific details of the laws and regulations to know what's what. It's tedious, but it can save you a ton of time and money when you find out that your customer is just being lazy and only reading category descriptions. We answer CUI questions on the hotline every week. Come hang out.

Weekly Live CMMC Q&A: 3.27.26

If you think November 2026 is the deadline for every defense contractor to achieve CMMC Level 2, then the weekly CUI hotline is for you.November could be the deadline depending on your specific customer.November isn't the deadline based on any general policy from the department of defense.For a lot of people who have already received CMMC status level requirements, they wish they another 7+ months.There are a lot of variables at play and we sit down every week to answer questions about all of them (live!)