Hey! We're in a similar boat—also a small defense contractor working toward CMMC Level 2. It
is overwhelming at first, especially sorting through all the NIST 800-171 requirements and documentation. We recently started working with
Overwatch Cybersecurity and it’s been a game-changer. They helped us break down the controls into manageable phases and offered templates that saved tons of time. We're not certified yet, but getting closer with their support. Highly recommend finding a reliable partner early—makes a big difference navigating this complex process. Good luck to everyone else on the same path!