UNSECURITY: Information Security Podcast Unsecurity Episode 261: CMMC Delay and Compliance Costs with Eric Vollbrecht and Nathan Austin
Aug 11, 2026
31:37
In this episode of Unsecurity, Megan, Brad, Nathan, and Eric unpack the recent 60-day pause on CMMC Phase 2 requirements and what it really means for contractors and subcontractors.
The conversation goes beyond the headline to explore the ongoing importance of self-attestation, the risks of false claims, and why compliance is still very much on the clock.
The team also breaks down the real costs of becoming assessment-ready, from initial scoping and technical debt to policy work, evidence collection, and third-party assessments.
Along the way, they explain why shortcuts and “easy button” solutions can create bigger problems later, and why due diligence matters when choosing a compliance partner.
If your organization is weighing whether CMMC is worth the investment, this episode offers a grounded look at the business, security, and operational tradeoffs involved.
Be sure to like, subscribe, and hit the notification bell for more insightful episodes.
#UnsecurityPodcast #Cybersecurity #FRSecure #MyTech #CMMC #DoW
We want to hear from you!
Reach out at [email protected] and follow us for more:
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social
About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.
The conversation goes beyond the headline to explore the ongoing importance of self-attestation, the risks of false claims, and why compliance is still very much on the clock.
The team also breaks down the real costs of becoming assessment-ready, from initial scoping and technical debt to policy work, evidence collection, and third-party assessments.
Along the way, they explain why shortcuts and “easy button” solutions can create bigger problems later, and why due diligence matters when choosing a compliance partner.
If your organization is weighing whether CMMC is worth the investment, this episode offers a grounded look at the business, security, and operational tradeoffs involved.
Be sure to like, subscribe, and hit the notification bell for more insightful episodes.
#UnsecurityPodcast #Cybersecurity #FRSecure #MyTech #CMMC #DoW
We want to hear from you!
Reach out at [email protected] and follow us for more:
LinkedIn: https://www.linkedin.com/company/frsecure/
Instagram: https://www.instagram.com/frsecureofficial/
Facebook: https://www.facebook.com/frsecure/
BlueSky: https://bsky.app/profile/frsecure.bsky.social
About FRSecure:
https://frsecure.com/
FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs. These fundamentals are lacking in our industry, and while progress is being made, we can’t do it alone. Whether you’re wondering where to start or looking for a team of experts to collaborate with you, we are ready to serve.