Cybersecurity Maturity Model Certification (CMMC)
DOD not meeting same standards it plans to hold contractors to under CMMC
In a new report, GAO found that the DOD only met 78% of the 110 CMMC 2.0 requirements for systems that manage controlled unclassified information.
Pentagon updates timeline for CMMC cybersecurity initiative
Depending on an interim rule, the Pentagon is hopeful to begin implementing CMMC controls in contracts in May 2023.
Industry still faces ‘a lot of ambiguity’ around CMMC implementation
The Professional Services Council's David Berteau says that while industry waits for CMMC 2.0 rules to be issued, many contractors are already moving to come into compliance.
Industry seeks consensus on government’s secure software compliance process
Companies want clarification from government over what specific artifacts and metadata it wants to assess.
TSP financial systems modernization; Zero trust cultural shifts; CMMC 2.0 begins rolling out
On the latest episode of The Daily Scoop Podcast, former DOD and Navy CIO Terry Halvorsen, Federal Retirement Thrift Investment Board’s Kim Weaver and former CIA official Ron Marks.
Defense R&D contractors inadequate in protecting sensitive data, IG says
The DOD IG says contracting officers should do a better job compelling contractors to meeting cybersecurity requirements.