I am trying to figure out around what time we can expect required CMMC assessments by outside assessors.

I found the following two links that estimate it to be around June 26, 2025.

https://natlawreview.com/article/department-defense-issues-proposed-timeline-cmmc-implementation#:\~:text=If%2C%20hypothetically%2C%20the%20final%20CMMC,begin%20on%20June%2026%2C%202027.

https://www.federalregister.gov/documents/2023/12/26/2023-27280/cybersecurity-maturity-model-certification-cmmc-program

Upper management keeps saying it is years away if at all and we most likely will have 6 months to fix any findings. I was hoping to find more updated info on this.