
CMMC 2.0 and NIST 800-171 in 2026: A Small Defense Contractor's Certification Roadmap
CMMC 2.0 took effect November 10, 2025, and Level 2 third-party assessments begin November 10, 2026. A practical guide to scope, cost ($80K–$250K over three years), the 14 control families, the POA&M rule, and a 90-day path for small DoD contractors.










