CMMC Brief

2026-10-05: PreVeil announced a free virtual CMMC summit (Oct 28) featuring the SP 800-171 author

Show Notes - 2026-10-05 Stories Covered: - Today: - PreVeil CMMC Security Summit scheduled for Oct 28 (virtual, free) (https://www.preveil.com/blog/top-cybersecurity-eve

2026-10-02: No new CMMC-specific rulemaking or enforcement actions landed today

Show Notes - 2026-10-02 Stories Covered: - Today: - DoD Proposed Rule Would Expand FOCI Reporting for Cleared Contractors. (https://www.pilieromazza.com/weekly-update-fo

2026-10-01: No new CMMC policy actions or cyber-related False Claims Act cases dropped today

Show Notes - 2026-10-01 Stories Covered: - Today: - Action: (https://www.justice.gov/opa/pr/signal-diagnostics-agrees-pay-over-20m-settle-false-claims-act-allegations-fa

2026-09-30: NIST post-quantum cryptography standards continue driving federal migration timelines that will

Show Notes - 2026-09-30 Stories Covered: - Today: - CIRCIA final rule expected this fall, with harmonization focus. (https://federalnewsnetwork.com/cybersecurity/2026/09

2026-09-29: A Defense Manpower Data Center breach exposed 3 million records

Show Notes - 2026-09-29 Stories Covered: - Today: - CCP and CCA certifications during the suspension. (https://www.reddit.com/r/CMMC/comments/1wshy64/current_worth_of_cc

2026-09-26: Former DoD CMMC executives published a pointed defense of the program during the Phase 2

Show Notes - 2026-09-26 Stories Covered: - Today: - Former CMMC Leaders Publish Defense of Program During Suspension (https://federalnewsnetwork.com/commentary/2026/09/w

2026-09-25: A federal court dismissed an FCA cybersecurity complaint against Archer Daniels Midland on

Show Notes - 2026-09-25 Stories Covered: - Today: - DoD moves to replace Cost Accounting Standards with GAAP. (https://www.pilieromazza.com/weekly-update-for-government-

2026-09-24: No policy developments, enforcement actions, or ecosystem announcements

Show Notes - 2026-09-24 Stories Covered: - Today: - CAD vendor certification requirements for CUI handling. (https://www.reddit.com/r/CMMC/comments/1wov7m3/what_certific

2026-09-23: Federal News Network published analysis on the False Claims Act trap in CMMC self-attestation

Show Notes - 2026-09-23 Stories Covered: - Today: - Proposed NDAA "Right to Repair" Provisions Would Default Contractor Technical Data to Government Purpose Rights (http

2026-09-22: The DoW CMMC Reform Task Force submitted its report to the CIO on September 11 (not yet public)

Show Notes - 2026-09-22 Stories Covered: - Today: - CMMC Reform Task Force submitted its report; recommendations not yet public. (https://www.insidegovernmentcontracts.c

2026-09-21: Open-CMMC v2.0 tackles CUI-to-OT workflows over SMB

Show Notes - 2026-09-21 Stories Covered: - Today: - Open-CMMC v2.0 extends CUI workflow protection to OT systems (https://www.reddit.com/r/CMMC/comments/1wlyjvv/opencmmc

2026-09-19: DOJ announced a major False Claims Act enforcement policy revision that limits sub-regulatory

Show Notes - 2026-09-19 Stories Covered: - Today: - DOJ revises Justice Manual to limit False Claims Act enforcement to binding legal obligations. (https://www.justice.g

2026-09-18: The Ninth Circuit ruled that federal agencies cannot unilaterally define what is "material" under

Show Notes - 2026-09-18 Stories Covered: - Today: - ISOO Releases CUI Notices 2026-07 and 2026-08: Agencies Must Give Contractors Explicit CUI Handling Guidance - Action

2026-09-17: A new FCA cybersecurity settlement reinforces that DOJ is actively enforcing self-attestation

Show Notes - 2026-09-17 Stories Covered: - Today: - CIRCIA Final Rule Expected This Month; DIB Contractors Face Overlapping Reporting Obligations (https://federalnewsnet

2026-09-16: DoD's new class deviation confirms baseline DFARS 7012 and NIST 800-171 Rev 2 compliance remain

Show Notes - 2026-09-16 Stories Covered: - Today: (https://federalnewsnetwork.com/cybersecurity/2026/09/as-the-pentagon-rethinks-cmmc-cybersecurity-isnt-pausing/) - What

2026-09-15: Cyber AB CEO Matthew Travis outlined reform proposals including continuous monitoring and smaller

Show Notes - 2026-09-15 Stories Covered: - Today: - Cyber AB submits reform recommendations to DoW Reform Task Force (https://federalnewsnetwork.com/technology-main/2026

2026-09-12: Honeywell settled a $2M False Claims Act case for failing to implement NIST 800-171 controls on a

Show Notes - 2026-09-12 Stories Covered: - Today: - 60-Day Suspension Review Period Ends, No Public Guidance Yet (https://www.reddit.com/r/CMMC/comments/1wdgf8n/60day_pa

2026-09-05: No CMMC-specific policy, enforcement, or rulemaking developments today

Show Notes - 2026-09-05 Stories Covered: - Today: - Executive Order 14421: Bulk-Power System Supply Chain Security (Signed, Aug. 26, 2026) (https://www.insidegovernmentc

2026-08-26: No policy, rulemaking, or enforcement developments

Show Notes - 2026-08-26 Stories Covered: - Today: - Compliance cost benchmarks now public. (https://summit7.us/blog/real-numbers-real-budgets-what-insourcing-cmmc-compli

2026-08-25: The Navy stood up a new Office of the Defense Industrial Base to revitalize maritime supply chains

Show Notes - 2026-08-25 Stories Covered: - Today: - Navy creates Office of the Defense Industrial Base to accelerate dual-use tech and supply chain resilience. (https://