January 2026 CMMC Connect

CMMC is moving fast, and the questions from the DIB are getting more specific...

In this January 2026 replay of Redspin's live CMMC Connect, our CMMC Certified Assessors (CCAs) unpack the latest updates from the field and answer real-world questions OSCs are facing as CMMC Level 2 assessments ramp up. This episode (literally) covers:

• Recent DoD CMMC FAQ updates and what they clarify (and don’t)

• ISACA’s new role as CAICO and what it means for CCP and CCA certifications

• The growing pace of completed CMMC assessments and what that signals for 2026

• Scoping challenges: virtual machines, shared resources, boundaries, and asset definitions

• Flow-down realities. Why primes are increasingly requiring Level 2 from subs

• CMMC vs. FedRAMP, and how to tell if you’re an ESP or a CSP

• CUI marking, mishandling, and what to do when CUI shows up where it shouldn’t

• FIPS validation pitfalls assessors see all the time

• Evaluating AI-enabled tools when CUI is involved

• Common reasons organizations struggle or fail during assessment

• NIST 800-171 

The session wraps with live audience Q&A, candid assessor perspectives, and practical advice drawn directly from active CMMC engagements, no theory, no fluff.

If you’re supporting DoD contracts, preparing for CMMC Level 2, or navigating compliance decisions in real time, this episode delivers clarity where it matters most.

CMMC Connect happens on the last Thursday of every month at 1 PM ET. Register for the series and submit questions here: https://redspin.com/cmmc-connect-hub/

Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.