https://www.pivotpointsecurity.com/cmmc-dibcac-assessment-lets-walk-through-the-audit-process/