Preparing Personnel and Policy for CMMC

**Executive summary:** The report is a guidance piece for organizations (particularly DoD contractors) preparing for CMMC that emphasizes the importance of human factors engineering, role-based awareness and training, personnel security and monitoring, cognitive load and fatigue mitigation, reducing misconfiguration risk, and building a culture of accountability; it also markets Continuum GRC as a compliance solution and contains no technical incident details or indicators.