understanding the biggest CMMC assessment pitfalls before audits