Hosted by Michael Brooks, CMMC Strategy and Engagement Director at A-LIGN, The Mission Continues is a weekly video series about CMMC and protecting the DIB. As the CMMC Phase II suspension unfolds, Michael will separate fact from rumor and translate each week's developments into clear next steps for defense contractors.
Ep. 10 – The Status of CMMC Phase II at the 60-Day Mark
Michael shares where things stand as the CMMC Reform Task Force's 60-day review window closes with no formal readout yet. He lays out the steps companies should take right now, and explains the difference between self-assessment, validated self-assessment, and third-party certification.
16 Sept 2026
Ep. 9 – What Still Applies: Navigating CMMC Reform Without Losing Momentum
In this episode, Michael Brooks lays out what still applies to your organization today, what you should be doing to stay on track, and why leadership accountability has never been more critical.
He covers the interaction between the CMMC pause and the ongoing FAR overhaul, walks through his five-step framework for CMMC readiness, and breaks down the affirming official role — what it is, what it isn't, and why it carries real legal weight regardless of where the reform lands.
9 Sept 2026
Ep. 8 – Trust Is Still the Foundation
Michael answers the questions he's hearing most from the field right now, from what the DoD might do with CMMC at the 60-day mark to whether assessments can be automated. He argues that no matter how the program evolves, the real objective has always been trust between the government and its suppliers.
2 Sept 2026
Ep. 7 – What Two New Reports Confirm About Self-Assessment
In this episode, Michael breaks down what new reports from CyberSheath and Kiteworks reveal about self-assessment accuracy across the defense base, and what that means for affirming officials now carrying continuous compliance risk without a third party checking their work. He also recaps what he heard directly from DOW CIO staff at a CMMC listening session during DIBX.
26 Aug 2026
Ep. 6 – From Speed to Trusted Innovation at Scale
Michael explains why scaling the defense base requires scaling trust and assurance right alongside it, and why fixing CUI identification is the cheapest, highest-leverage compliance move available right now.
19 Aug 2026
Ep. 5 – A New Equation for CMMC
Michael breaks down why the current cost model around CMMC doesn't work, and makes the case for reframing cybersecurity assurance as a business advantage rather than a compliance cost. He lays out exactly what affirming officials need in order to defend their affirmation with confidence.
12 Aug 2026
Ep. 4 – Five Signals From DOW Leadership During the CMMC Phase II Pause
Michael breaks down five themes from recent DOW leadership remarks on the CMMC pause, from continuous monitoring to False Claims Act exposure for inaccurate self-attestations. He also shares what A-LIGN submitted in its own RFI response, with a reminder that RFI inputs are due this Friday, August 14, at noon ET.
5 Aug 2026
Ep. 3 – The Missing Middle in CMMC
Michael shares a real assessment where a defense manufacturer's perfect self-attestation score ended up missing six critical gaps. He uses the case to illustrate what he calls the "missing middle," the readiness gap between self-assessment and full third-party certification. He also recaps this week's Cyber AB town hall and SBA roundtable, and closes with three priorities defense contractors should focus on next.
29 Jul 2026
Ep. 2 – The Shift From Compliance to Assurance
Michael connects recent DoD announcements to why protecting controlled unclassified information is a national security issue, not just a compliance one. He shares what he's hearing directly from contractors, C3PAOs, and MSPs across the market, and gives defense contractors five priorities to focus on next.
22 Jul 2026
Ep. 1 – CMMC Phase II Is Suspended. Here's What Actually Changed.
In this episode, Michael Brooks unpacks the DoD's suspension of CMMC Phase II — what it changes (third-party validation) and what it doesn't (Phase I self-attestation, DFARS 252.204-7012, NIST 800-171 obligations). He covers why the pause happened, what the 60-day CMMC Reform Task Force review means for contractors, and why readiness, not certification status, is what matters right now.
Contact CMMC: The Mission Continues
Guest appearances
Does not typically book guests
Based on episode analysis; this does not confirm that the show is currently accepting guests.
Host of CMMC: The Mission Continues?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
Explore this show Podcast research with Pod Engine
