DOD officials have long said every single defense contractor will need CMMC certification, but new info says otherwise.

An RFP has sparked questions over whether CMMC will work. The request was for a continuous monitoring tool of the industry, but its rushed process raised alarms in the industry.

Training to become a CMMC assessor has taken longer than expected to start, in part due to the pandemic.

Non-defense contractors should closely watch what the DOD is developing for its contractor cybersecurity standards.

Having CMMC training, assessing and credentialling all housed under the one accreditation board has triggered questions about a potential conflict of interest.

A coalition of six tech industry associations has some gripes with how the DOD plans to roll out CMMC, the new cybersecurity model for all contractors.