“DOD’s components’ systems would not be approved to process, transmit, or store DOD CUI if CMMC version 2.0 applied to the components,” reads a new report from GAO. “This is because CMMC would require ...