CMMC Phase 2 C3PAO assessments are suspended. Your NIST 800-171 and SPRS obligations are not. Read the plain-English breakdown →