CMMC FAQ Updated (May 2026): What DIB Contractors Should Do Next

The DoD’s CMMC FAQ has been updated again. If you are working toward Level 2 certification, FAQ updates are not background noise. They are the closest thing to interpretive guidance you get between rulemakings, and assessors read them. The latest version, CMMC FAQ Revision 2.3 from May 2026, is worth reviewing closely. For small-to-medium DIB […]

L3Harris Just Put Its Supply Chain on the Clock. Here’s What That Means for You.

Last week, L3Harris Technologies sent an updated letter to its supplier base with a clear message: get CMMC certified by July 30, 2026, or risk losing your place on DoD programs. Three months is not enough time to start. For contractors who haven’t begun the certification process, the timeline is already somewhere between tight and […]

Why CMMC Is Harder for General Contractors Than Anyone Wants to Admit

If you’re a general contractor working in the Defense Industrial Base, CMMC isn’t just another compliance requirement. It’s a direct challenge to how your business operates. Most guidance around CMMC assumes a company controls its own environment. Its own systems. Its own people. That’s not how construction works. The Real Problem: You Don’t Do Most […]

CMMC Level 1 Requires 17 Safeguards 15 Controls

The official FAR clause lists 15 safeguards, but CMMC documentation often references 17 practices. Here is why: 

CMMC inherited the DoD’s earlier mapping from the DFARS 252.204-21 “Basic Safeguarding” table, where two of the FAR requirements were split into multiple CMMC practice IDs during modeling. They are not additional requirements—just a structural carryover from the original DoD-to-NIST mapping exercise.