The Summit 7 Compliance Team has helped more than 90 companies achieve CMMC Level 2 certification.
This week on a special edition of the hotline you'll get a chance to ask them anything.
- Best indicators of success?
- Craziest thing to ever come out of an assessor's mouth?
- Pineapple on pizza?
See you Friday at 1pm EST.

There are no deadlines in the CMMC Phased Roll-out.
"When do I need CMMC?" depends entirely on your customer and the data you'll be handling.
NAVFAC SW says November 2026.
PCS JTF says Spring 2027.
Some SOCOM support contracts say you don't need to achieve status until six months *after* award.
That's blatantly against policy, but the DoD isn't a monolith.
It all depends on your specific situation.
If you have questions about your specific situation, come hang out with us Fridays at 10am PST when we answer your questions live.

Just because something sounds like it should be CUI doesn't make it so.
Unclassified data is only controlled if a law, regulation, or government-wide policy specifically says that data must be, well, controlled.
Sometimes there are dozens of "authorities" related to the same type of data so the CUI Registry summarizes and describes each category very broadly.
Even though those descriptions might talk about "vulnerability information" in general, the summary doesn't make all vulnerability information controlled.
You have to read the specific details of the laws and regulations to know what's what.
It's tedious, but it can save you a ton of time and money when you find out that your customer is just being lazy and only reading category descriptions.
We answer CUI questions on the hotline every week.
Come hang out.

If you think November 2026 is the deadline for every defense contractor to achieve CMMC Level 2, then the weekly CUI hotline is for you.November could be the deadline depending on your specific customer.November isn't the deadline based on any general policy from the department of defense.For a lot of people who have already received CMMC status level requirements, they wish they another 7+ months.There are a lot of variables at play and we sit down every week to answer questions about all of them (live!)

The CUI Hotline continues this Friday at 10am EST.
Questions about DFARS cyber requirements? NIST? CMMC?
We sit down for an hour every week and answer your questions live!

Every Friday at 1pm EST we sit down and answer questions about CMMC, DFARS cyber requirements, and NIST controls.
And we do it live!
And it's free!
See you there.

A question we often hear: how can businesses be expected to defend themselves against nation states?
Typically people don't realize how even nation states routinely use well known techniques with known mitigations and detection signatures.
Turns out that some pretty boring, evergreen cybersecurity practices that have been around for decades are still extremely effective.
But you have to actually do them.
We answer all kinds of questions on the Hotline every week.
Stop by this Friday and we'll spend some extra time talking about how a 10 year-old security standard still punches above it's weight relative to everything goin on in the world these days.

We're only 15 weeks into the CMMC phased rollout and the DoD is crushing their Level 2 certification estimate.
Originally the department was shooting for 517 Level 2 certifications in the first year.
We're barely over 100 days in and we're already nearly double that number.
There's just 181 days left until the start of phase 2.
Have questions? Stop by the hotline and we'll answer them live!