You are tasked to assess a private aerospace company looking to secure CMMC certification for their work related to satellite systems. The company handles sensitive communication technologies and has implemented significant measures to mitigate insider threats. During your assessment, you learn that the company tracks anomalies such as attempts to access restricted communication channels, sudden changes in financial status among personnel, and behavioral shifts indicating potential exploitation vulnerabilities. They conduct quarterly security awareness sessions and use biometric monitoring in high-security zones. Employees with access to highly sensitive channels receive intensive insider threat awareness training. After conducting interviews with the company's CIO, who confirms the full implementation of CMMC practice AT.L2-3.2.3-Insider Threat Awareness, how would you score their program for compliance?