Forgive me if this question has been asked before.

I own a small machine shop, literally me and 1-1/2 other guys running it. We just started doing some Defense work that we were so excited about. Now I'm worried that's going to stop because CMMC is too expensive. I don't have the capacity to figure it out on my own, at least I don't think so. Summit 7 + certification seems like it's going to cost $100k.

I'm certain I won't be able to get away with an "enclave", like Prevail, as we will have CUI on the CNC machines. They are not connected to the network but will have the G-code programs based off of technical data that is CUI. That gets on there via USB sticks floating around.

What is the best course of action for a small business like this? Are there, or will there be grants to help with certification? We only have a couple little contracts now, not enough $$$ coming in from defense to justify spending a whole lot. I initially wanted to go into this to grow our sales as we've had a subpar past year.