The recent DoD CIO memo pausing CMMC Phase 2 certification raises a lot of questions. Is CMMC going away? Should contractors stop preparing? The answer to those is ‘no.’ In this episode, we're joined by Brett Cox, Principal of the Cybersecurity Oversight Office and DAF/CMMC Program Management Office at Boeing, to break down the latest developments and explain what the DoD's announcement actually means for contractors. Brett shares insights from his recent meeting with DoD CIO leadership and explains why this isn’t the end of CMMC. We explore the future of CMMC, the growing focus on resiliency and Zero Trust, upcoming FAR CUI requirements, and why independent C3PAO assessments continue to provide value even during the current review period.In this episode, we discuss:• The DoD CIO's CMMC Phase 2 suspension memo• Why CMMC is paused—not canceled• What contractors should be doing during the review period• Why NIST SP 800-171 compliance remains mandatory• FAR CUI and its potential impact on federal contractors• C3PAO certifications, self-assessments, and False Claims Act considerations• The future of CMMC, Zero Trust, and cybersecurity modernizationConnect with Daniel: https://www.linkedin.com/in/danielakridge/Connect with Brett: https://www.linkedin.com/in/brett-r-cox/Learn more: https://summit7.us/