CMMC reform news could arrive soon. The Cyber AB holds its next Town Hall on Tuesday, October 27, and the CMMC Reform Task Force's findings still aren't public.

At September's Town Hall, presenters shared what they openly called speculation: DoD may be moving away from point-in-time assessments that go stale quickly. Nobody outside DoD knows for sure. But if the program shifts toward ongoing proof that your security works, the teams that already collect evidence continuously will be ready.

Here's how to start, regardless of what's announced.

Treat evidence like logs, not like homework

Most teams gather screenshots and exports the week before an assessment. Flip that around.…