So here's the plot twist nobody in the defense contracting world saw coming: after years of everyone frantically SSP-ing, POA&M-ing, and hiring consultants at $300/hour to get "CMMC ready," the Pentagon looked at CMMC Phase 2 — due to kick in November