Blog

CMMC Implementation: 4 Critical Steps to Getting Started

Just getting started with CMMC preparation? Before you can implement a single security control, you need a clear understanding of your environment. Most organizations underestimate how much foundational work is required before implementation can even begin, and skipping ahead usually means redoing work later when gaps surface. In this article, we’ll walk you through the […]

Blog
Suspension of CMMC Phase II and What It Means for You

Suspension of CMMC Phase II and What It Means for You

On July 13th, 2026, at 3:30PM EST, the Department of War (DoW) released a memorandum for senior Pentagon leadership with a subject of “Implementing Department of War Chief Information Officer’s Suspension of the Advancement to Cybersecurity Maturity Model Certification Phase 2 Requirements” and “Removing Barriers to Defense Industrial Base Expansion: Immediate Suspension and Strategic Review […]

Blog White Papers

CMMC Recertification: What Qualifies as a “Significant Change” Requiring a Second C3PAO Assessment

Earning CMMC certification takes a significant investment of time, resources, and effort. Once an organization clears its C3PAO Assessment, there’s a natural sense of relief — even accomplishment. That CMMC Status can last up to three years, but two events bring recertification back onto the calendar sooner: reaching the end of the standard three-year cycle, […]

Blog
How to Pass the Most Failed CMMC Controls

How to Pass the Most Failed CMMC Controls

If your organization handles Controlled Unclassified Information (CUI) and is working toward CMMC Level 2 certification, understanding where organizations most commonly fail is half the battle. In a recent webinar, 112Cyber’s certified CMMC assessors Nick Graning and Jordon Darling broke down five of the most commonly failed control areas — and exactly what you need […]

Blog
C3PAO Evaluation

C3PAO Interview Checklist: 10 Evaluation Criteria

Not all C3PAOs are created equal. Before you sign an engagement, these are the questions that separate credible assessors from expensive mistakes — organized by category, with what good answers look like, and what should send you running. 01 Scoping & Environment Understanding Ask “How do you approach defining the CMMC assessment boundary?” “How do […]