2026 PreVeil CMMC Summit

Have CUI? Here Comes the Responsibility

Often, contractors don’t know whether they hold CUI. This session settles that quickly, then turns to the harder question: what CUI obligates you to.

Dan CiarletteCTO, DeMase Technical Services

JH Jay HillSenior Cyber Security Manager, Global GRC

AP Andy PaulCTO, Teramis

SSP Teardown: Would Yours Hold Up?

Your SSP is finished but will it hold up when someone who didn’t write it reads it — an assessor, a prime, a partner? This session walks through three of the hardest controls to document and shows a good version and bad version side by side. You’ll leave knowing which one yours resembles.

Christina ReynoldsManaging Director, BDO

Robert TeagueVP, CMMC Services, Redspin

Flowdown That Works: Instructions Subs Can Act On

You’ve told your suppliers they need to be compliant. Have you told them enough to act on it? This session covers what clear flowdown looks like — how you mark and hand off CUI, what you require and what evidence you accept.

DB Dave Bullis

Travis GoldbachVP, Coalfire Federal

Protecting CUI Without Overpaying: What to Buy, What to Skip, What’s Free

You have to protect CUI, but what should it cost? This session reviews the technologies you actually need, where companies overpay for them, and what’s genuinely free. You’ll leave knowing what fits a company your size.

MB Michael Barker

Adam GloverDir. of CMMC, Insight Assurance

Mock Assessment: One Control, Live

How deep does an assessor actually go? This session is a live mock assessment of a single control — starting with your SSP statement and following it into policy, evidence and interview. You’ll leave knowing what will be asked of you and what will satisfy it.

Noël VestalPresident & CIO, Aethon Security

How We Got Our Suppliers Compliant

One defense contractor walks through what it actually took to move their supply chain toward compliance — who they started with, what they asked for, what they had to provide. You’ll leave knowing what the work looks like and how to best prepare.

Elizabeth HuyEVP Commercial Services, Alluvionic

Manas DasCEO, StrategicIT Solutions

Four paths to compliance. Which is right for your company?

There is more than one way to get to CMMC compliance, and the right one depends on your size, your budget, and how much of the work you can absorb internally. This session walks through four routes and what each demands. You’ll leave knowing which one is yours.

Travis SandsDirector of Cyber Security, FirstCall Consulting

Jaclyn JonesLCCA, GRC Manager, MAD Security

You Passed Your Assessment. You’re Not Done.

What does it actually take to keep up your certification? Not the rare, dramatic changes but the ordinary ones such as unpatched systems or inventory that lists machines you decommissioned last year. This session covers what a working compliance program looks like and what yours has to do going forward.

Kevin SchaaffChief Engineer, BTI

Alex JohnsonSnr. Solutions Engineer, PreVeil

Session TBD