DoD pauses CMMC, but contractors still have obligations

“The CMMC program is just a certification program on top of the security controls that are still required and will be required,” said Eric Crusius.