"Right now we have CMMC that talks about cybersecurity requirements, even for commercial item suppliers," said Larry Allen.