All civilian defense contractors, prime vendors, and FedRAMP SaaS suppliers must certify continuous …