CMMC Resource Hub › 2026 Sessions

Recorded August 17–18, 2026 · Suquamish, WA

CMMC-PNW 2026 Sessions

CMMC-PNW 2026 was a two-day defense cybersecurity conference held August 17 and 18, 2026, in Suquamish, Washington. All 20 educational sessions were recorded and are free to watch. Each session page has the video, chapters written as the questions it answers, and slides where the speaker shared them. The sessions cover whether CMMC is still required after the July 2026 Phase 2 pause, how to scope and design your CUI boundary, how a Level 1 self-assessment works, and what C3PAO assessors, Navy contracting officers, and prime contractors actually check.

Recorded August 17 and 18, 2026 · Page checked on October 5, 2026

Most valuable sessions, as ranked by attendees

In the post-event survey, attendees named their three most valuable sessions. These six came out on top.

#1 · 49:00

Why CMMC Exists: Protecting CUI, the Warfighter, and Your Contracts

Regan Edens

#2 · 31:01

CMMC Scoping: How to Draw and Shrink Your CUI Boundary

John Nolan

#3 · 57:28

Cloud, On-Prem, or Hybrid: How to Choose Your CMMC Boundary

Koren Wise

#4 · 56:10

How Contracting Officers Verify CMMC in SPRS

Navy Contracting Officer Panel

#5 · 44:37

What C3PAOs Look For in a CMMC Level 2 Assessment

C3PAO Panel

#6 · 44:46

What CMMC Actually Requires vs Common Misinterpretations

Andy Sauer

All 2026 sessions by topic

Is CMMC still required?

Why CMMC Exists: Protecting CUI, the Warfighter, and Your ContractsRegan Edens. The history of CMMC, why protecting CUI matters to the warfighter, and where the program stands after the July 2026 Phase 2 pause.49:00
What CMMC Actually Requires vs Common MisinterpretationsAndy Sauer. Two tests for any CMMC advice: "Where is that written?" and "Is this a risk or a requirement?"44:46
Is CMMC Still Required After the Phase 2 Pause?Keynote Panel. Why the pause is a review rather than a cancellation, and which NIST SP 800-171 requirements to keep working on.37:49

Scoping and design

CMMC Scoping: How to Draw and Shrink Your CUI BoundaryJohn Nolan. The two diagrams every assessment depends on, and how scoping sets the size, cost, and difficulty of everything else.31:01
Cloud, On-Prem, or Hybrid: How to Choose Your CMMC BoundaryKoren Wise. The four architectures a CMMC assessor sees most often, and how to choose between them.57:28
CMMC Cloud Enclave: Secure CUI, Not EverythingRob Panek, Security Cavalry. How an enclave shrinks your assessment scope, and where FedRAMP inheritance stops.44:11
CMMC Level 2 Assessment Prep: On-Prem Gotcha ControlsMaxine Andujar, Summit 7. Getting an on-prem environment assessment-ready, and the controls on-prem companies most often miss.38:14
Hybrid CMMC Design: Keep On-Prem Systems, Contain CUIAshley Lex, Aprio. Pairing GCC High and Azure Government with on-prem CAD, equipment, and print.22:48
GCC or GCC High for CMMC? Let Your Data DecideShaun Stanley, Microsoft. Why your data, not your company size or your prime, decides which Microsoft cloud you need.21:34

CMMC Level 1 and free help

How Does a CMMC Level 1 Self-Assessment Work?Gary Glover, SecurityMetrics. Scoping FCI, each Level 1 domain in plain language, evidence, and annual affirmation.37:45
Free CMMC Help in Washington: APEX and NIST MEPSarah Stuart and James Davis. No-cost contracting help, Level 1 support, and right-sizing CMMC for manufacturers.26:45

Level 2 program, evidence, and assessment

What C3PAOs Look For in a CMMC Level 2 AssessmentC3PAO Panel. Four assessors on readiness reviews, SSPs, evidence, and what happens on site.44:37
CMMC Affirming Official: Who Should Sign and What They RiskMichael Brooks. Choosing the leader who attests in SPRS, and what they are signing.32:21
CMMC Level 2 Lessons Learned: Why Scoping Comes FirstTiffiney Groce, FutureFeed. Four mistakes from an enterprise-wide Level 2 effort, and what fixed them.45:02
CMMC Roadmap: What You Need and When (RPO, GRC, MSP)Jerry Leishman. CMMC as a program, not a project, and who to bring in at each stage.37:47
What Evidence Do CMMC Assessors Want? GRC WalkthroughDan Fox and David Winn. Labeling evidence to assessment objectives and keeping it current.37:34

Buyers and the business case

How Contracting Officers Verify CMMC in SPRSNavy Contracting Officer Panel. What contracting officers look up in SPRS before award, and why missing entities can't win.56:10
What Prime Contractors Require From Subs for CMMCPrime Contractor Panel. The CUI access gate and compliance affirmation primes ask subcontractors to sign.40:37
How to Turn the CMMC Pause Into a Competitive AdvantageStuart Itkin. Why primes, not the government timeline, set the real CMMC requirements for subcontractors.25:26

Risk transfer

Will Your Cyber Insurance Work After a CUI Incident?Rick Rosenberry, UKON. Why most cyber policies are built for PII breaches, not CUI, and what to check before you bind.41:24

Sponsor spotlights

Short presentations from CMMC-PNW 2026 sponsors on CMMC tools and services: RAMPxchange, Teramis, Riveron, and SecurityMetrics.

See Solution Providers →

Other years

Sessions from CMMC-PNW 2025, recorded October 2025.

CMMC-PNW 2025 Sessions →

Common questions

Are the CMMC-PNW 2026 sessions free to watch?

Yes. All 20 sessions are free on YouTube and on this site. Each session page has the video, chapters written as the questions it answers, and slides where the speaker shared them.

Where should I start if I'm new to CMMC?

Start with Regan Edens on why CMMC exists, then the keynote panel on the Phase 2 pause, then John Nolan on scoping and Koren Wise on design options.

Is CMMC still required after the July 2026 Phase 2 pause?

According to the keynote panel, yes. The pause stopped the Phase 2 rollout, not the underlying NIST SP 800-171 requirements for protecting CUI. Watch the keynote panel and the Navy contracting officer panel for the details.

Which session should I watch for CMMC Level 1?

How Does a CMMC Level 1 Self-Assessment Work? by Gary Glover, then Free CMMC Help in Washington for no-cost support.

Who hosts CMMC-PNW?

CMMC-PNW is hosted by Help Desk Cavalry, Compliance Cavalry, and Security Cavalry.