The proposed CMMC changes show the industry that the DoD is taking security, and this shared burden, seriously.