CMMC builds the bridge between proverbial risk and opportunity. The conversation about CMMC for the future winners is no longer about risk, it’s about competitive advantage. Five CMMC risk factors now create the chasm ahead for many, but also create a significant opportunity for some. Supply chain conformity will create competitive advantage and determine future winners: 

1. Current high percentage of DIB noncompliance with DFARS 7012, and insufficient due diligence and due care by primes.
2. Mobilization of enforcement activities and DoD’s institutionalization of cyber risk awareness and DoD’s CMMC standards will significantly expand the prime contractor’s risk and liability under DFARS 7012 and CMMC.
3. CMMC readiness requires suppliers to complete their Plan of Action & Milestones BEFORE they may attempt certification.
4. An organization must meet 100% of the assessment requirements or 0% nonconformities for the desired CMMC Level in order to certify. 
5. Prime contractors that apply pressure on their supply chains without an effective Supply Chain Risk Management Strategy (SCRM) will exacerbate pre-existing industry risk factors, fuel a spending frenzy, and burn time. 

Here is an excellent resource highlighting key ideas on thought leadership on the subject – https://dtcglobal.us/blog/f/nist-800-171-shaping-the-dods-cmmc-framework