In my opinion, CMMC has nothing to do with supply chain management. CMMC is intended to serve as a verification mechanism to ensure appropriate levels of cybersecurity practices and processes are in place to ensure basic cyber hygiene as well as protect controlled unclassified information (CUI) that resides on the departmentâs industry partnersâ...