As we move from assurance to attestation legal risk increases for CMMC compliance.