May 2026 CMMC Connect

The panel digs into what FIPS 140-2 moving to historical status on September 21, 2026 means for your tech stack, how to tell if your MSP is actually doubling as a CSP, what does and doesn't count as CUI when COTS items and PII (CUI//SP PRVCY) are in play, whether non US citizens can serve as admins in a GCC High environment, what to do when your SSP says whitelisting but your tools are actually blacklisting under CM.L2 3.4.8, and how strict the separation between administrative and standard user accounts really needs to be (spoiler: admins demonstrating they can't open user files is now part of the assessment). You'll also hear a Cyber AB Town Hall recap, the rule on mock versus formal assessments (you can flip one direction, not the other), the latest ecosystem snapshot (1,391 final Level 2 certifications, a new record), and a reality check on the November 10, 2026, versus November 10, 2027 dates. An unfiltered hour from the team running these assessments every day. CMMC Connect happens on the last Thursday of every month at 1 PM ET. Register for the series and submit questions here: https://redspin.com/cmmc-connect-hub/ Subscribe to Cyberspin on Apple iTunes, Spotify, or your preferred podcast platform. You can always stream the latest episodes at redspin.com.