Understanding the Layers of CMMC Assessments for Long-Term Compliance