Defense contractors still struggling with basic CMMC requirements Cybersecurity Dive