The CMMC assessment pause doesn't remove cybersecurity obligations. Here's why defense contractors should treat it as an ...