October 2026 CMMC Connect

In this October edition of CMMC Connect, Redspin’s assessors and consultants (in full Halloween regalia) take on the questions defense contractors are talking about during the ongoing pause:

The panel breaks down the Federal News Network two-part article that gave us an investigative look at the CMMC Reform RFI responses, including possible outcomes of the reform/pause, when invoices actually count as FCI, how to handle encrypted USBs at conferences under CM.L2 3.1.21, whether annual affirmations require a new assessment, and whether prescriptive requirements are coming via Rev 3 ODPs. Plus a reality check on when the pause ends (nobody knows, maybe after midterms), a jaw dropping scenario where a Level 1 contract got flipped to Level 2 by addendum after award, and a strong case for keeping your November C3PAO assessment on the schedule. Hit play for the straight talk on where your cybersecurity requirements actually stand right now.

CMMC Connect happens on the last Thursday of every month at 1 PM ET. Register for the series and submit questions here: https://redspin.com/cmmc-connect-hub/

Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.