The Defense Compliance ReportResearch & DataIndependent · Non-commercial

Independent research & reference

Research & Data

This is the independent research and reference section of The Defense Compliance Report. We publish original data, primary-source analysis, and reference material on CMMC and the Defense Industrial Base — maintained separately from the rest of the publication and free for anyone to read, cite, and link to.

Last updated July 1, 2026

Cyber False Claims Act Settlements: The Complete DOJ Tracker (2021–2026)
17 DOJ-announced cyber FCA settlements, $82M+ total — every amount, whistleblower payout, and allegation traced to a primary source. Includes fiscal-year vs. calendar-year reconciliation and downloadable CSV. Last verified July 3, 2026.
Last updated July 3, 2026
CMMC Statistics 2026: Certification Counts, Costs & Enforcement Data
60+ evidence-graded CMMC statistics: 337,968 impacted entities, official cost estimates, certification counts, small-business impact, and $39M in defense-related False Claims Act settlements. Last verified July 2, 2026.
Last updated August 10, 2026
CMMC Certification Tracker: Level 2 Data & C3PAO Capacity
How many companies are CMMC certified? 1,666 final Level 2 certificates as of June 2026. Monthly tracker: C3PAOs, CCAs, and the Certification Gap — compiled from Cyber AB town hall disclosures.
Last updated August 10, 2026
CMMC Solicitation Tracker: 2026 DoD Data
Source-linked sample of 20 DoD solicitations that reference CMMC levels, DFARS clauses, and award gates — compiled from public SAM.gov records, July 2026.
Last updated August 10, 2026
CMMC Flowdown Checklist (2026): Subcontractor Level Matrix
The 2026 CMMC flowdown checklist for primes: which clauses to flow down, the exact CMMC level each subcontractor needs, and what to verify before award. Source-mapped to 32 CFR § 170.23 and DFARS 252.204-7021.
Last updated August 10, 2026

Content on The Defense Compliance Report is fully server-rendered. JavaScript is not required to read this site.