CUI Hotline: Live CMMC Q&A

We're back from CS5 so this week we'll be stepping through a ton of questions we got from the event and, like always, anything that comes up during the livestream.

The Summit 7 Compliance Team has helped more than 90 companies achieve CMMC Level 2 certification. This week on a special edition of the hotline you'll get a chance to ask them anything. - Best indicators of success? - Craziest thing to ever come out of an assessor's mouth? - Pineapple on pizza? See you Friday at 1pm EST.

There are no deadlines in the CMMC Phased Roll-out. "When do I need CMMC?" depends entirely on your customer and the data you'll be handling. NAVFAC SW says November 2026. PCS JTF says Spring 2027. Some SOCOM support contracts say you don't need to achieve status until six months *after* award. That's blatantly against policy, but the DoD isn't a monolith. It all depends...

Just because something sounds like it should be CUI doesn't make it so. Unclassified data is only controlled if a law, regulation, or government-wide policy specifically says that data must be, well, controlled. Sometimes there are dozens of "authorities" related to the same type of data so the CUI Registry summarizes and describes each category very broadly. Even though those descri...

If you think November 2026 is the deadline for every defense contractor to achieve CMMC Level 2, then the weekly CUI hotline is for you. November could be the deadline depending on your specific customer. November isn't the deadline based on any general policy from the department of defense. For a lot of people who have already received CMMC status level requirements, they wish they another 7+...

The CUI Hotline continues this Friday at 10am EST. Questions about DFARS cyber requirements? NIST? CMMC? We sit down for an hour every week and answer your questions live!

Every Friday at 1pm EST we sit down and answer questions about CMMC, DFARS cyber requirements, and NIST controls. And we do it live! And it's free! See you there.

A question we often hear: how can businesses be expected to defend themselves against nation states? Typically people don't realize how even nation states routinely use well known techniques with known mitigations and detection signatures. Turns out that some pretty boring, evergreen cybersecurity practices that have been around for decades are still extremely effective. But you have to actual...

We're only 15 weeks into the CMMC phased rollout and the DoD is crushing their Level 2 certification estimate. Originally the department was shooting for 517 Level 2 certifications in the first year. We're barely over 100 days in and we're already nearly double that number. There's just 181 days left until the start of phase 2. Have questions? Stop by the hotline and we'll answ...

There's just 185 working days left until CMMC Phase 2 begins. If you have questions, the CUI Hotline is the place for you. Live every Friday at 1pm EST.

We all have a lot of questions after the Super Bowl. - How does it feel to cut a 14-win QB only to watch him win a Super Bowl the next year? - Who had Sam Darnold as the first QB from the 2018 draft class to win a Super Bowl? - Why did the DoD make the largest non-CMMC change to DFARS cybersecurity clauses since 2020 and fail to, ya know, fail tell anyone about it? Luckily we sit down every Friday...

People overestimate the difference between NIST SP 800-171r2 and r3. They underestimate the difference between CMMC Level 2 and Level 3. Not sure about the difference or why it matters? Come hang out on the Hotline and we'll answer your questions live!

We're still 41 weeks away from the start of CMMC Phase 2. Yet, many defense contractors are finding out that the "phased roll-out" has virtually no bearing on when they will receive a 3rd-party assessment requirement. People who tuned into the weekly CUI Hotline knew what was coming. Not sure? Tune in each Friday and we'll answer your CMMC/DFARS/NIST questions live!

We're 2.5 months into the CMMC roll-out. The most common type of call we get these days: Defense contractors we originally spoke with 3-4 years ago who decided to "wait and see" what would happen. It's a big reason why we're answering the same questions today that we did in 2022. That's also why we started the weekly hotline!

Another week into the CMMC phased roll-out, another supplier letter from a major prime contractor. Trying to condense years of compliance work in to a few months? Putting the final touches on your systems before the big assessment? You probably have a lot of questions and luckily we sit down every Friday to answer them live!

We're quickly approaching 100 CMMC level 2 certified clients. Every week we share our insight and experience for free! CMMC is going to change things for defense contractors in 2026, but the CUI Hotline has your back.

We're one month into Phase 1 of the CMMC roll out and reality is setting in for a of companies. Some opted to wait until the last minute as a strategy. Some waited with no intention of ever getting started. We get very different questions from both groups. Luckily we sit down every Friday and answer as many as we can - live!

For the first time in five years there are no major rulemaking updates looming over the holiday season. CMMC is in-effect, the phased roll-out is underway, and requirements are being signaled by the government and primes alike. Instead of one or two big questions, it's the season of a million little questions. That's why we do the Q&A livestream every Friday!

We're quickly approaching 67 CMMC Level 2 clients. We sit down every Friday to share what we've learned. Find us live on YouTube, LinkedIn, or reach out at cuihotline[.]org

First hotline of CMMC Phase 1! Join us live every Friday at 1pm EST on LinkedIn and YouTube. We answer questions about everything from DoD cyber regulations to individual controls to technology and service strategies real companies have used to achieve CMMC Level 2.

Alrighty folks, the last CUI Hotline before the start of CMMC Phase 1! This is a great time to check out the stream and bring your questions on all things NIST, CMMC, and DFARS cyber.

CMMC Phase 1 begins just after Halloween - spooky! To celebrate we're telling CMMC ghost stories on the hotline. Boo!

The government shutdown continues, but CMMC phase 1 is still 11/10/2025. A trickle of notices are still going out on SAM[.]gov and they clearly include CMMC requirements. Have questions? We have answers live every Friday!

We're less than 30 days away from the start of CMMC phase 1. That means lots of people with lots of questions. We sit down for an hour every Friday to answer questions live. CMMC, DFARS, NIST, you name it. Come hang out!

We're just 35 days away from the start of CMMC phase 1. Have questions? We've been streaming live every Friday for over a year. Come hang out!