My recommendation is straightforward and controversial: Don’t use the word “compliance”. Instead, use leadership, communication, and culture to take the right actions because it is the right thing to do. Our most successful clients do not see CMMC as a compliance framework; they see it as the proper way to do business with buy-in from everyone.