For anybody looking to do business with the US federal government, you will likely run into CMMC as you review potential contracts to bid for. Unlike previous compliance, CMMC isn’t a after the fact penalty. If you don’t meet CMMC, you can’t get the work. CMMC has been talked about for a while however, its finally starting to get enforced. Microsoft’s public sector team posted an article about the final rules for 32 CFR HERE. Anybody looking for a clear understanding of what is expected should check this out!