13 Jul 2026CMMC Phase II suspended: no C3PAO assessments can be designated. DFARS 7012 and Rev 2 still apply.What changed, and what did not →

Tell a director what landed on your desk.

Who answers

Patrick or John replies within one business day.

  • Patrick Caruso

    Patrick Caruso

    Director of Cyber Assurance

    CUI, the enclave and CMMC: what your systems need for an assessment, and what your SPRS score really is.

  • John Milso

    John Milso

    Director of Legal, Contracts & Risk Advisory

    Flow-downs and subcontract terms: what the clause you were sent obliges you to, and what is worth negotiating.

Bring to the call

  • The flow-down email from your prime
  • Your SPRS score, if you have one
  • The contract or subcontract number

For CUI or ITAR routing, request our DoD SAFE link before attaching anything to standard email.

Who should reply?

Government & Prime Contractor Engagement

We specialize in supporting federal programs and defense contractors. Our team is available for proposals and can be named as key personnel.