This week the DoD released the interim final rule for the Cybersecurity Maturity Model Certification (CMMC) and added details that may have immediate effects. It is outlined in an 89-page notice in the federal register published yesterday (Sept 29) entitled “Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041).” What […]
Every couple of weeks, I am finding myself back in the same conversation when advising clients and potential clients about the impacts of the DoD’s Cybersecurity Maturity Model Certification (CMMC). They inevitably ask: What is CUI? Controlled Unclassified Information CUI is government created or owned information that requires safeguarding or dissemination controls consistent with applicable […]
Several developments in the last couple of weeks have stood out as harbingers of the future – a future that involves the Defense Department’s Cybersecurity Maturity Model Certification (CMMC). For months, representatives from the CMMC Accreditation Body (CMMC-AB) and the CISO for OSD(A&S) Katie Arrington talked about the Summer of 2020 being marked by forward […]
The Cybersecurity Maturity Model Certification Accreditation Body (CMMC-AB) recently posted a video of their Standards Committee Chair, Regan Edens, with a discussion of their standards framework, stakeholders and some of the big takeaways as CMMC continues to roll out over the next 6-18 months. CMMC is coming. As the Accreditation Body continues to mature its processes, companies […]
Are you a government contractor? Have you heard some rumblings about something called CMMC and wondered what the government has in store for future compliance? You’re not alone. We here to help with a short FAQ about the Defense Department’s new plan to mature contractor cybersecurity standards. What does CMMC stand for? CMMC stands for […]