December 10, 2026 · 9AM PT / 12PM ET
Why the Controls Behind CMMC Matter
A discussion on why the controls matter, what suppliers need to do today, and how to protect CUI on the shop floor.
In partnership with
CMMC is easy to treat as paperwork: assess, post a score, sign, repeat. But the controls behind it exist for a reason, and they protect suppliers whether or not anyone is checking.
In this conversation, we'll talk through why the controls matter, what suppliers are expected to do today, and practical ways to protect CUI, from the front office to the shop floor.
What we’ll discuss:
- Why the controls matter beyond the checkbox, and what they’re actually meant to catch before someone else does
- What doing it well looks like today, from the self-assessment to what an Affirming Official takes on when they sign
- Practical ways to protect CUI on the shop floor, including how manufacturers handle older equipment without disrupting production
- What’s next for the controls, including why NIST 800-171 Rev 3 deserves more attention than it’s getting
Who should attend:
- Defense suppliers and subcontractors, especially manufacturers working out how CUI fits on the shop floor
- Affirming Officials and executives responsible for CMMC compliance
- IT, security and compliance leads
Speakers
Bo Birdwell
Director, Supply Chain Resilience
Twenty-Six Defense (formerly Elbit Systems of America)
Michael Brooks
CMMC Strategy & Engagement Director
A-LIGN
Shrav Mehta
CEO and Founder
Secureframe
