Raj Raghavan and Vishal Amin discuss the implications of the new Cybersecurity Maturity Model Certification (CMMC) regulations, focusing on Microsoft’s approach to compliance and the importance of Controlled Unclassified Information (CUI). They explore the challenges faced by organizations, especially small to mid-sized contractors, in achieving compliance, the shared responsibility model in cloud services, and the role of Microsoft’s tools (https://bit.ly/3Xg9L0Z). in facilitating this process. The discussion also touches on global perspectives on data sovereignty and the mission of the Spades Institute in fostering public-private partnerships in national security.