On Dec. 12, the U.S. Department of Defense publicly released an updated draft of the Cybersecurity Maturity Model Certification, or CMMC, framework, Rev 0.7. This draft follows a previous version released on Nov. 8 (Rev 0.6), which we assessed in a prior article. While the latest draft provides much-needed detail on requirements for contractors who expect to be in the higher tiers of the CMMC’s five level framework, it also leaves several information gaps unfilled.