The CDO is organizing work around eight priority data domains, and the department is looking to pilot a CMMC approach with its vendors.