For companies operating across the defense industrial base — from shipyards to manufacturers to prime and subcontractors working with the Department of War — CMMC compliance has moved from “something to keep an eye on” to a near-term operational reality. Yet for many organizations, the actual requirements remain murky, and the guidance available online is often outdated, overly technical, or built around fear rather than clarity.
To help close that gap, Valor Cybersecurity CEO Greg Tomchick is hosting a live, plain-language session designed specifically for contractors who need practical answers rather than another generic compliance overview.
The Event
CMMC in Plain English: What Defense Contractors Must Do Right Now
Wednesday, September 23, 2026
2:30 PM ET
$99 — includes live Q&A and two compliance guides to keep
Reserve a seat
The 60-minute session is built for shipyards, defense manufacturers, and DoW contractors who need a working understanding of their compliance obligations — not a sales pitch. Attendees walk away with two compliance guides they can put to use immediately with their teams.
Why CMMC Knowledge Matters Right Now
For organizations of scale, and shipyards and manufacturers in particular, CMMC compliance isn’t just an IT concern. It touches procurement, subcontractor management, and program timelines. A misunderstanding at any level can slow down a contract award or create costly rework later in the process.
Contracting officers and prime contractors are increasingly looking for partners who can speak to their compliance posture with confidence. Understanding what applies to your organization and being able to demonstrate it is quickly becoming part of what it means to be “contract-ready” in the current defense procurement environment.
Common Questions the Session Will Address
Which CMMC level actually applies to us?
CMMC requirements vary based on the sensitivity of the information a contractor handles, not simply the size of the company or the value of the contract. Many organizations assume they fall into a higher or lower level than they actually do. This can lead to over-investing in unnecessary controls or under-preparing for what’s required. The session walks through how to correctly identify the level that applies to your specific contract type.
What do assessors ask for first?
Contractors are often surprised by which documentation and evidence assessors request early in the process. Understanding these expectations ahead of time allows organizations to get organized before an assessment begins, rather than scrambling once one is underway.
What causes most self-assessments to fail?
Self-assessment is sometimes treated as a low-risk formality, but it’s one of the more common points where contractors run into trouble; often due to incomplete documentation or misunderstanding what “compliant” actually looks like in practice. The session covers the most frequent mistakes so organizations can address them proactively.
Is our current IT setup “good enough”?
General IT hygiene and formal CMMC compliance are not always the same thing. The session clarifies where standard security practices fall short of specific CMMC requirements, helping contractors identify real gaps rather than assuming their existing setup is sufficient.
What Attendees Walk Away With
- A clear understanding of which CMMC level applies to their contracts
- Insight into what assessors look for first, and where organizations typically get caught off guard
- Awareness of the most common self-assessment mistakes and how to avoid them
- Two compliance guides for ongoing reference after the session
- The opportunity to ask questions specific to their organization during live Q&A
Who Should Attend
This session is designed for decision-makers and compliance leads at shipyards, defense manufacturers, and DoW contractors of all sizes, particularly organizations preparing for an upcoming bid, working through subcontractor compliance requirements, or simply looking to understand where they currently stand.
CMMC in Plain English takes place live on Wednesday, September 23 at 2:30 PM ET. Seats are limited to keep the Q&A focused and useful for the contractors in the room.
Use the link here to join! Reserve your seat →
