“The Hudson Institute found the cost to achieve Cybersecurity Maturity Model Certification (CMMC) to be "inordinately expensive."”