Updates to CMMC 2.0 policy for defense awards