Castuner

CMMC Brief

Carolina Clear Tech, LLC

Daily CMMC and defense industrial base compliance briefing. DoD policy and rulemaking, False Claims Act cyber enforcement, Cyber AB and C3PAO developments, NIST 800-171 updates, and contracting impact for DIB contractors, compliance managers, and the MSPs and consultants who support them. From Carolina Clear Tech.

Web del podcast

Escolta'l a la teva aplicació

Episodis

66 episodis

  1. 2026-11-14: Treat automated penetration testing as complementary security evidence 3:21
  2. 2026-11-13: A reported $13 million cybersecurity settlement makes cloud-provider evidence 5:26
  3. 2026-11-11: A reported $13 million cybersecurity settlement makes evidence-backed compliance claims the 9:28
  4. 2026-11-10: A practitioner reports that a mock assessment exposed an overstated SPRS (Supplier Performance Risk 2:19
  5. 2026-11-07: New Army MAPS protests challenge small-business teaming restrictions and cybersecurity 4:08
  6. 2026-11-05: Review where Microsoft 365 backups containing CUI are stored and who can access them 5:40
  7. 2026-11-04: Practitioners are discussing how to track incoming CUI and evaluate small cloud enclaves that 1:59
  8. 2026-11-03: Practitioners are questioning whether reported cloud-service authorization changes justify using AI 3:25
  9. 2026-10-30: Military movers are challenging proposed CMMC Level 2 requirements 7:11
  10. 2026-10-29: A reported CMMC task force review outlines reform options 4:45
  11. 2026-10-28: Reported CMMC task force recommendations offer reform options 3:03
  12. 2026-10-27: Federal News Network reports that CMMC review responses identify security implementation 4:23
  13. 2026-10-24: A reported Honeywell Aerospace settlement underscores the need to substantiate cybersecurity 4:53
  14. 2026-10-23: U.S 2:53
  15. 2026-10-22: A rehearing brief in Anthropic's Pentagon dispute is a reason to review AI supplier dependencies 4:02
  16. 2026-10-21: Keep self-assessment evidence current during the paused third-party phase-in 6:24
  17. 2026-10-20: Keep Phase I self-assessment work and applicable contract safeguards funded while checking the 7:43
  18. 2026-10-17: NIST & Standards 8:14
  19. 2026-10-16: Policy & Rulemaking 4:53
  20. 2026-10-14: DoD's (DoW's) Oct 1 implementation memo on cost transparency clarifies that contractors are not 7:47
  21. 2026-10-13: A Reddit thread clarifies SPRS visibility rules for primes (they cannot see supplier scores 4:37
  22. 2026-10-12: Defense contractors on Reddit are navigating CAD outsourcing proof points for CUI projects 11:08
  23. 2026-10-10: No signed policy or enforcement news landed in this batch 6:01
  24. 2026-10-09: No signed policy, enforcement action, or Cyber AB statement landed in today's feed 5:42
  25. 2026-10-07: NIST's AI Accelerator director addressed post-deployment drift monitoring for generative AI 4:52
  26. 2026-10-06: A practitioner webinar confirmed that 89% of polled DIB organizations are pressing ahead with CMMC 9:34
  27. 2026-10-05: PreVeil announced a free virtual CMMC summit (Oct 28) featuring the SP 800-171 author 4:20
  28. 2026-10-02: No new CMMC-specific rulemaking or enforcement actions landed today 6:23
  29. 2026-10-01: No new CMMC policy actions or cyber-related False Claims Act cases dropped today 7:51
  30. 2026-09-30: NIST post-quantum cryptography standards continue driving federal migration timelines that will 7:40
  31. 2026-09-29: A Defense Manpower Data Center breach exposed 3 million records 5:14
  32. 2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2 6:41
  33. 2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on 7:52
  34. 2026-09-24: No policy developments, enforcement actions, or ecosystem announcements 3:47
  35. 2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation 7:06
  36. 2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public) 6:05
  37. 2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB 4:22
  38. 2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory 6:26
  39. 2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under 9:25
  40. 2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation 8:07
  41. 2026-09-16: DoD's new class deviation confirms baseline DFARS 7012 and NIST 800-171 Rev 2 compliance remain 5:34
  42. 2026-09-15: Cyber AB CEO Matthew Travis outlined reform proposals including continuous monitoring and smaller 9:44
  43. 2026-09-12: Honeywell settled a $2M False Claims Act case for failing to implement NIST 800-171 controls on a 7:29
  44. 2026-09-05: No CMMC-specific policy, enforcement, or rulemaking developments today 6:46
  45. 2026-08-26: No policy, rulemaking, or enforcement developments 3:42
  46. 2026-08-25: The Navy stood up a new Office of the Defense Industrial Base to revitalize maritime supply chains 13:26
  47. 2026-08-22: The FAR CUI proposed rule mandating NIST SP 800-171 rev 3 across all federal contracts is expected 7:25
  48. 2026-08-15: The r/CMMC community is working through FIPS 140-3 validation requirements and GCC-High migration 6:13
  49. 2026-08-09: DoW CIO Kirsten Davies signaled at Black Hat that the Phase 2 hold may be termed a "pause" rather 4:55
  50. 2026-08-08: A Federal News Network interview with early CMMC Level 2 adopter IntelliGenesis highlights the real 7:39