What’s paused, what’s not, and why your signature is now the certification
Get a clear read on which DFARS clauses are already in your contracts, and what an affirming official attests to in SPRS.
Michael GrudenPartner, Steptoe LLP
The 2026 CMMC Summit has ended.
Every session is now available on demand.
–11:40 am
Keynote
Michael GrudenPartner, Steptoe LLP
–12:15 pm
Keynote
NIST + CMMC in the era of AI attacks
Dr. Ron RossAuthor, NIST 800-171
–12:50 pm
Keynote
How AI is reshaping the threat landscape
Dr. Raluca PopaCo-founder, PreVeilHead of Security +Privacy Research, Google DeepMind
–1:25 pm
Break
Diamond Sponsor Sessions
Tap into the expertise of Mainspring, Arctiq, and CBIZ. These MSPs see hundreds of companies within the DIB and are experts in risk reduction, compliance, and infrastructure modernization.
–2:00 pm
3 parallel tracks — choose one
Have CUI? Here Comes the Responsibility
Often, contractors don’t know whether they hold CUI. This session settles that quickly, then turns to the harder question: what CUI obligates you to.
Dan CiarletteCTO, DeMase Technical Services
Jay HillSenior Cyber Security Manager, TD Synnex
Andy PaulCTO, Teramis
SSP Teardown: Would Yours Hold Up?
Your SSP is written — but will it hold up under an assessor’s review? We take three of the hardest controls to document and put a strong version next to a weak one. You’ll leave knowing which one yours looks like.
Christina ReynoldsManaging Director, BDO
Robert TeagueVP, CMMC Services, Redspin
Flowdown That Works: Instructions Subs Can Use
You’ve told your suppliers they need to be compliant. Have you told them enough to act on it? This session covers what clear flowdown looks like — how you mark and hand off CUI, what you require and what evidence you accept.
Dave Bullis
Travis GoldbachVP, Coalfire Federal
–2:35 pm
3 parallel tracks — choose one
Protecting CUI Without Overpaying: What to Buy, What to Skip, What’s Free
You have to protect CUI, but what should it cost? This session reviews the technologies you actually need, where companies overpay for them, and what’s genuinely free. You’ll leave knowing what fits a company your size.
Dr. Michael BarkerResearch Faculty Cybersecurity, Georgia MEP
Adam GloverDir. of CMMC, Insight Assurance
Mock Assessment: One Control, Live
How deep does an assessor actually go? This session is a live mock assessment of a single control — starting with your SSP statement and following it into policy, evidence and interview. You’ll leave knowing what will be asked of you and what will satisfy it.
Alex JohnsonSnr. Solutions Engineer, PreVeil
Scott SingerPres. Federal Div, ControlCase
Noël VestalPresident & CIO, Aethon Security
How We Got Our Suppliers Compliant
One defense contractor walks through what it actually took to move their supply chain toward compliance — who they started with, what they asked for, what they had to provide. You’ll leave knowing what the work looks like and how to best prepare.
Elizabeth HuyEVP Commercial Services, Alluvionic
Manas DasCEO, StrategicIT Solutions
–3:10 pm
3 parallel tracks — choose one
Four paths to compliance. Which is right for your company?
There is more than one way to get to CMMC compliance, and the right one depends on your size, your budget, and how much of the work you can absorb internally. This session walks through four routes and what each demands. You’ll leave knowing which one is yours.
Travis SandsDirector of Cyber Security, FirstCall Consulting
Jaclyn JonesLCCA, GRC Manager, MAD Security
You Passed Your Assessment. You’re Not Done.
What does it actually take to keep up your certification? Not the rare, dramatic changes but the ordinary ones such as unpatched systems or inventory that lists machines you decommissioned last year. This session covers what a working compliance program looks like and what yours has to do going forward.
Kevin SchaaffChief Engineer, BTI
Alex JohnsonSnr. Solutions Engineer, PreVeil
–4:10 pm
Closing
Introducing PreVeil VDI – the simplest path to compliance
CUI doesn’t have to live on your laptops. PreVeil’s new VDI solution gives you a secure virtual desktop to work in, so the computers stay out of your compliance boundary. Live demo.
Gregg LarocheVP Product Management, PreVeil
Christopher SanfilippoProduct Marketing Manager, PreVeil
–4:30 pm
Closing
AI and CMMC: separating signal from noise
Dr. Rick HansenCEO, APS Global
Sponsors
Diamond
Gold
Silver
Bronze
PROUDLY MADE IN THE USA
PreVeil is 100% Designed & Developed in the USA