Michael Duffey, the nominee to be USD for acquisition and sustainment, told lawmakers he's sensitive to CMMC compliance challenges for small businesses.