Episode Description
Despite what you may have read on LinkedIn, Reddit, or Twitter, CMMC did not die. The rollout IS paused at Phase 1. But, that's only a small portion of the story. MSP owner and CMMC practitioner Lawrence Cruciana from Corp InfoTech joins us this week to separate the actual announcement from the LinkedIn panic and Twitter FUD.
Takeaways:
• What the 60-day pause, Phase 2 suspension, and RFI actually change
• Why prime contractors can still require CMMC Level 2 third-party certification
• Why self-attesting to controls you cannot support is where False Claims Act risk gets real
• How to write SSP language that survives tool changes, patch exceptions, and aging systems
Make sure to follow the podcast or ask your own questions at: