What are the biggest obstacles we face in achieving CMMC compliance?

[Sarah.Gilbert]

There is no one-size-fits-all blueprint for how to achieve Cybersecurity Maturity Model Certification (CMMC) compliance but only tools and guidance on how to get there. 

What do you think are some of the biggest obstacles that need to be addressed? What is missing in your compliance ecosystem now ? 

[#2]

@Sarah.Gilbert right now, it's personal devices. The new ability to apply conditional access to apps-covered-by-app-protection-policy enables us to have some leniency with end user devices, which is essential for our ability to collaborate without friction. But..Edge can't. Cloud Policy Service was announced as rolling out last year for GCC-High, but isn't available still. The feature was deleted from the Microsoft 365 Roadmap, so I can't even go look it up to see that it's been delayed or what. It's just gone with no further information. Without the ability to configure Edge via MAM, we still have to require full MDM for personal devices which we don't like and our employees really don't like. Help!