CMMC Phase 2 is on hold, but DFARS 7012, your NIST 800-171 self-assessment, and the training controls behind your SPRS score aren't. Here's what still applies.
What to recommend when CMMC clients ask about security awareness training. Auditor-ready certificates, quarterly cadence, and a reseller program that pays.
CMMC Phase 2 starts November 2026. What the framework requires for security awareness training, what assessors look for, and how ClickCerts fits.
You don't need 1,000 training modules. You need certified, current training your people will finish. Why simpler beats bloated, and what CMMC requires.
