CMMC Compliance Guide

73 Episodes

Reverse

The 10 CMMC Questions Defense Suppliers Ask Us Most: A Self-Check for Your Compliance Program

2026-10-0251:55

Submit any questions you would like answered on the podcast! These are the 10 questions Stacey and Brooke hear more than any other from defense suppliers, and most companies get at least half of them wrong without realizing it. If you've ever wondered whether your setup would actually hold up to a close look, this episode is your self-check. In this episode: Do you actually need to worry about CMMC right now, with the certification requirement on contracts still paused?How to actually figure ...

SPRS Scoring Explained in Plain English: How the 110-to-Negative-203 Scale Works and How to Fix a Bad Score

2026-09-2554:25

Submit any questions you would like answered on the podcast! Your SPRS score can quietly decide whether your company is even eligible to bid on a DoD contract, and defense contractors have already paid millions in False Claims Act settlements for getting that number wrong. Austin and Brooke break down exactly how SPRS scoring works, what score you actually need, and how to make sure your number is accurate before a government audit finds you. In this episode: What SPRS (Supplier Performance R...

CMMC Level 2 Explained in Plain English: Phases, POA&M Rules, Assessments, and What Level You Actually Need

2026-09-1158:19

Submit any questions you would like answered on the podcast! What does CMMC Level 2 actually require, and how does it connect to the four-phase rollout, the POA&M process, and the assessment you'll eventually go through? Austin and Brooke break down Level 2 in plain English, a few days ahead of the DoD's September update on the Phase 2 pause. In this episode: Where things stand with the Phase 2 pause right now, and what's not paused (your obligation to be compliant with NIST 800-171 R2)Wh...

CMMC Vendor Marketing Claims Decoded: What "Covers 90 of 110 Controls" Actually Means

2026-08-2832:04

Submit any questions you would like answered on the podcast! Every CMMC vendor says the same thing: "we cover 80 out of 110 controls" or "90 out of 110." Austin and Brooke break down what that claim actually means, why "maps to," "satisfies," and "supports" are not interchangeable words, and why you almost always still have work to do even after buying the solution. In this episode: What vendors actually mean when they claim to cover a specific number of the 110 controlsWhy "maps to," "satisf...

The Real Cost of CMMC Scoping Mistakes: Is "Six Figures" Real or Just Marketing?

2026-08-2146:58

Submit any questions you would like answered on the podcast! Is the "six-figure CMMC scoping mistake" a real number, or just something people throw around to sound scary? Stacey and Brooke break down where these numbers actually come from, what over-scoping really costs versus under-scoping, and what a defensible scope actually looks like. In this episode: Where the "six figures" scoping numbers actually come from (and why the DoW CIO and SBA's recent numbers conflated compliance cost with ce...

#box-pro-ellipsis-179167584001829{-webkit-line-clamp:2;}CMMC Compliance Guide