Validating DoD CMMC Compliance Effectiveness