Hotman Group Perspectives

CMMC & NIST

Practical guidance on CMMC, NIST cybersecurity requirements, scoping, implementation, assessment readiness, remediation, and sustaining the program after the assessment.

CMMC Compliance: Cutting Through the Confusion for Defense Contractors
CMMC compliance requires more than policies, tools, and checklists. Cheri Hotman and Paula explain how defense contractors should approach CMMC scoping, CUI, NIST 800-171, readiness, evidence, documentation, remediation, assessment preparation, and ongoing program management.
CMMC 101: What you need to know from framework to final rule
CMMC requirements have changed significantly since the program was introduced. This updated CMMC 101 guide explains the current Phase I status, CMMC Levels 1–3, FCI and CUI, NIST 800-171, self-assessments, scoping, SPRS, and what defense contractors should do now.