
Episode #85
Episode 85: What Is CMMC — And Why Should Iowa Manufacturers Care?
In this episode of Industry Iowa, host Steve Wilson sits down with Melissa Burant — supply chain specialist and CMMC navigator at CIRAS, Iowa State University — to break down what the Cybersecurity Maturity Model Certification means for Iowa manufacturers. If your company touches defense contracts in any way — even as a subcontractor — CMMC is no longer something to watch from the sidelines. As of November 2025, the Department of Defense has begun writing compliance requirements directly into contract solicitations. The clock is running. Melissa brings nearly 12 years of CIRAS experience and a background in federal government to the conversation, and she doesn't sugarcoat it. She walks through the three levels of certification, what compliance realistically costs, the misconceptions that are getting manufacturers into trouble, and why this is a business strategy decision — not an IT problem. Whether you're just hearing about CMMC for the first time or you've been putting off taking action, this episode gives you a clear picture of where things stand and exactly where to start





