CMMC2 is it real?

So, for 3 or more years we have been hearing from many sources that CMMC is here or right around the corner. Everyone has been contacted to spend money now and avoid the June rush. Most defense subcontractors have wisely waited to see what is coming. Being from New England we have a saying, "If you don't like the weather wait a minute it will change." One can say over the past three years we have seen many changes to CMMC and due dates. As a software developer we have had to continuously rewrite our software to keep up with the latest dictates coming out of the CMMC group out of fear that today is the day CMMC starts. 

What we know so far: 

1. CMMC version 2 is in the rules making phase, there is no time really set to complete this task, although, when announced this phase they said it would take so many months. According to their published timeline the last month to complete the rule making task is November 2023 
2. We know that the first phase of CMMC version 2 is the same as NIST-800-171, a standard we all have already agreed to comply with in our current contracts. 
3. We know NIST-800-171 has never been enforced 
4. To that end CyberAB has hired inspectors to do enforcement of CMMC version 1 but have not yet decided upon what they will teach these inspectors for version 2.0. 
5. You will need almost immediately your Supplier Performance Risk System Score (SPRS), a POAM, a ASSP and a Risk Assessment so you can continue to do business with your contractor while you work to comply. 

We at Next Level Systems provides software at a low cost to help you achieve compliance and complete the aforementioned tasks. Finally, we are very easy to use having been designed by auditors, who by the way worked in the defense industry in manufacturing. We can be reached at Nextlevelsys.com or e-mail me at [email protected] we would be happy to show you, our software.