Skip to content

CMMC: To be or not to be

August 31, 2026 · 43 min

Show notes

Michael Gruden, partner at Steptoe LLP, joins Off the Shelf for the latest on cybersecurity and government contracts compliance. 

The conversation focuses on “CMMC to Be or Not to Be” where Gruden provides his insights and assessment of the CMMC journey to date and in the future. 

He outlines the considerations playing into the CMMC pause and what he expects moving forward.

Gruden also shares some best practices for cyber compliance across the federal contracting landscape, and he give his thoughts regarding the Revolutionary FAR Overhaul (RFO) and the new Controlled Unclassified Information (CUI) guidance in FAR Part 40. 

Finally, Michael talks about Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) rule making and what can be expected. 

 

See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

All episodes of Off the Shelf

Settings

Display

Language

Decides which stations you see first on the home page.

History

Recently played stations and episodes and your latest searches are only stored in this browser.

Notifications

A short notice when a podcast you follow has a new episode. Turn off single podcasts with the bell on their page.

Account

Save favorites – in the app and on the website.

Keyboard shortcuts

/
Open search
Space
Play or pause
← →
In the player: back 15 s, forward 30 s (episodes) · in a row: next tile
↑ ↓
In a row: target within the tile
Home / End
In a row: first or last tile
Esc
Close window or menu
?
This overview
Now playing

Go to station page

Play next

    Add episodes with “Play next” – they play after the current episode.