A huge joke. If you have ever had to work with the DoD you may have had to deal with CMMC.
It's totally ridiculous. At least it will boost the economy by adding thousands of security officer jobs and pad the pockets of any security vendor, and drive system administrators nuts by having to deal with shit like Microsoft Azure GCC High