CMMC Meets NISPOM: How DIB Contractors Can Operationalize Both Without Breaking Their Security Programs (W02b)
Defense contractors face a convergence of compliance obligations: NISPOM-driven industrial security requirements and the rapidly approaching CMMC certification mandate. For FSOs and security managers, these frameworks can feel like parallel universes. The talk explores how cleared facilities are operationalizing CMMC readiness within existing NISPOM-compliant programs, where the frameworks align, where they conflict, and what practical steps organizations can take to avoid duplicating effort or missing critical gaps as the November 2026 C3PAO deadline approaches.