I’ve got them serious #CMMC blues

Hated by every security recluse

CEOs blame me for all their costs

And scream, “Why don’t I sell COTS?”

CMMC didn’t make #cui

We need to see eye to eye

That was an Executive order

I ain’t no greedy hoarder

Not even the DoD

Did this to me

It was NARA

Who took costs farther

But folks see CMMC

As a wound and wanna cauter it.

Yet OMB decided #CUI needed moderate

FIPS came from their lips

Not mine

I didn’t take your dime

That was 199

Forgot about FISMA

Didn’t Ya

Forgot about FISMA

Didn’t Ya

Stop blaming CMMC

For someone’s crime

It’s not me

Not Delta Twenties

Those just pennies

171 in NIST’s baseline

Robbing your bottom line

You see,

Don’t blame CMMC

You fret

Over technical debt But

7012 had the clause

delving its paws

Into your dwindling books You self-attested

and now feel bested

So stop with dirty looks

CMMC didn’t do this

NO complaining on LinkedIn

Instead let this lesson sink in

Grow your SSP

Cut your POA&M at the knees

Don’t blame CMMC

For your lack of

#cybersecurity

It wasn’t me

Forgot about FISMA

Didn’t Ya

Forgot about FISMA

Didn’t Ya