In this episode of CHPS of Insight, host Ron Sullivan speaks with David Fraley of Secure IT Service Management to discuss the Cybersecurity Maturity Model Certification (CMMC), ongoing compliance obligations for Department of Defense contractors, and The Department of Defense pausing the Phase 2 requirement tying contract eligibility to C3PAO certifications. 

Together, they explore industry concerns about cost, limited assessment capacity, low compliance across the defense industrial base, and increased legal risk from misrepresenting SPRS submissions under the updated CMMC reporting tab.

This podcast is intended for general informational purposes only and does not constitute legal or financial advice or a solicitation to provide legal services. The information in this podcast is not intended to create, and receipt of it does not constitute, a lawyer-client relationship. Listeners should not act upon this information without seeking professional legal counsel. The views and opinions expressed in the podcast represent those of the individual speaker only and are not necessarily the views of Clark Hill PLC.