The US federal government has created a simplified and more flexible version of the CMMC model, but will it have the desired impact in reality?