WEDNESDAY, Nov 4, 2026 1:00 PM ET
Cut the B.S.
What to Do About CMMC, and When
CMMC gets messy fast. There’s a lot of advice, a lot of noise, and a lot of pressure to buy tools or fix everything at once. That’s usually where teams get into trouble.
The real challenge is knowing what to do first, when something actually affects your SPRS score, where your CUI boundary should sit, and what evidence you need to capture along the way. We’ll walk through the decisions that matter, in the order they matter, and give you a practical 30-, 60-, and 90-day plan you can actually use. Built for small and mid-sized defense contractors, IT leaders, and executives responsible for CMMC readiness and affirmation.
You’ll leave with:
- A clearer picture of what matters right now
- A better way to evaluate CMMC advice and vendor recommendations
- Practical guidance on scope, evidence, and SPRS timing
- A 30-, 60-, and 90-day action plan for what to do next
-
Wesley Reinhart, Director of CMMC Services
FACILITATOR -
Jim Ambrosini, Senior Director of Cybersecurity Advisory Services
FACILITATOR
Distinguish signal from noise.
Identify which conference announcements, interpretations, and emerging trends could materially affect CMMC strategy - and which do not require immediate action.
Spot the gaps assessors are likely to challenge.
Recognize recurring weaknesses in scoping, evidence, shared responsibility, and operational ownership before they become assessment findings.
Make defensible decisions amid uncertainty.
Evaluate conflicting guidance and determine how to move forward without overengineering the environment or pausing necessary compliance work.
Recalibrate the readiness roadmap.
Confirm whether current priorities, investments, and timelines still align with contractual obligations and real assessment expectations.
Your Guides to Getting CMMC Right
CMMC requirements can get complicated quickly. Jim Ambrosini and Wesley Reinhart help defense contractors understand their obligations, identify gaps, and make informed security decisions.
Jim Ambrosini
Sr. Director of Cyber Advisory Services
Wesley Reinhart
Director of CMMC Services
QUARTERLY COMPLIANCE INSIGHTS
The Fine Print Newsletter
IT Modernization Manufacturing 7 min read
What Makes IT Hard for Regulated Businesses to Manage Without Outsourced IT Services?
In-house IT works 40 hours a week, but attackers and 72-hour reporting clocks run all 168. See the 24/7 gaps regulated businesses face and how to fix them..gif)
IT Modernization Manufacturing 11 min read
The Complete Guide to Manufacturing IT Outsourcing
Discover how effective manufacturing IT outsourcing can streamline operations, enhance cybersecurity, and improve vendor coordination for multi-site facilities.
Cybersecurity Manufacturing