We are continuing to add to the Institute’s CMMC FAQ. New entries include:

• What is Commercially Available Off the Shelf (COTS)?
• Can you have COTS services?
• How does CMMC handle COTS items?
• Will DFARS 252.204-7012 apply to an organization certified at CMMC Maturity Level 1 (i.e., which does not handle CUI)?