CMMC: Paused, Not Over
What Smart Organizations Are Doing While the Rules Are Frozen
CMMC May Feel Like It's in Flux...
The recent suspension of the CMMC Phase II rule has created a lot of questions. Some organizations have interpreted it as a reason to pause, while others aren't sure if they should continue on.
Rather than offering a single perspective, Bluewave is bringing together CMMC experts from Thrive and C3--specialists across cybersecurity, compliance, and assessment readiness--to discuss what they're seeing in the field, where organizations struggle most, and how successful teams are preparing regardless of how the timeline unfolds.
What You'll Get:
- What to do about the Phase II suspension. Learn how experienced CMMC advisors are interpreting the recent changes and which readiness efforts should continue despite regulatory uncertainty.
- The fundamentals you still need to get right. From assessment scoping and SSP development to identifying common readiness gaps, hear where organizations tend to stumble.
- Expert guidance for technical decisions. Understand when a CMMC enclave makes sense, how to evaluate GCC versus GCC High, and how third-party providers can impact both compliance and assessment scope.
- Lessons learned from organizations already on the journey. Hear the patterns our panel has observed across successful CMMC programs that make assessments smoother and the missteps that create unnecessary complexity.
- Multiple expert perspectives in one conversation. Bluewave has assembled leaders from across the CMMC ecosystem to provide a balanced discussion informed by real-world client engagements, helping you make more confident decisions for your own organization.
Join Bluewave, Thrive, and C3 for an expert-led conversation that turns today's uncertainty into a practical roadmap for tomorrow's CMMC success.
Our Expert Panel:
Bluewave has assembled a panel of experienced CMMC experts from Thrive and C3 to provide a balanced view of the challenges organizations face today. Drawing from real-world engagements, they'll share practical insights on readiness, assessment preparation, and the decisions that can make or break a successful CMMC journey.
Michael Leggett
Cybersecurity and Compliance Practice Lead, Bluewave
Michael Leggett is Bluewave’s Cybersecurity and Compliance Practice Lead, with a background spanning security architecture, compliance, and solution engineering. He brings years of hands-on experience helping organizations strengthen their security posture and navigate complex compliance requirements, including CMMC.
Rolando Torres
VP, Cyber Consulting, Thrive
Rolando Torres has more than 25 years of experience in the industry. He is Vice President of Cyber Consulting at Thrive, where he leads the delivery of strategic cybersecurity engagements that help organizations assess risk, strengthen operations, and build a clear path toward long-term resilience.
Bill Wootton
Chief Growth Officer and Co-Founder, C3
Bill Wootton is Chief Growth Officer at C3 Integrated Solutions and a longtime technology executive with experience in revenue growth, strategic partnerships, and business development. With leadership roles spanning telecom and technology services, he brings a strong perspective on how organizations align growth strategy with evolving compliance and security demands.
Is This Session Right for Your Organization?
organizations looking for clear direction on their CMMC journey
This discussion is particularly valuable for organizations that:
- Are unsure how the recent Phase II suspension should influence its CMMC roadmap.
- Are preparing for a CMMC readiness assessment for the first time.
- Are struggling to define assessment scope across complex environments or multiple subsidiaries.
- Are evaluating whether to build a dedicated CMMC enclave or modernize an existing Microsoft environment.
- Need to improve SSP quality and close common readiness gaps before an assessment.
- Want to learn from organizations that have successfully navigated CMMC challenges instead of repeating common mistakes.
Who Should Attend?
- CISOs and Information Security Leaders responsible for building and overseeing CMMC compliance strategies.
- IT Directors and Infrastructure Managers evaluating Microsoft environments, enclaves, and technical architectures needed to support compliance.
- Compliance and GRC Professionals developing SSPs, preparing documentation, and coordinating readiness efforts across the organization.
- Executive Decision Makers who need to understand where to invest time and resources while CMMC requirements continue to evolve.