CMMC is a Thing (Almost) - Now What Do We Do?