CMMC Phase 2 audits are suspended. Your NIST 800-171 and SPRS obligations are not. Read the plain-English breakdown →