CMMC

Closing the CMMC training gaps

Look for trainers working on the Cybersecurity Maturity Model Certification program to realign their efforts to support recent changes to the certification process in 2022.

  • By Lauren C. Williams

CMMC assessments could resume in January

The governing body responsible for implementing the Defense Department’s unified cybersecurity program for contractors expects security procedures for authorized third party assessors to start back up in early 2022. But DOD has the final say on the timeline.

  • By Lauren C. Williams

What’s next for CMMC

After the Defense Department revamped cybersecurity standards for contractors, the Cybersecurity Maturity Model Certification program’s accreditation body is making adjustments.

  • By Lauren C. Williams

Who's going to volunteer for the new CMMC?

The Defense Department is looking for contractors to test out its revamped cybersecurity standard to protect unclassified but sensitive data.

  • By Lauren C. Williams

DOD revamps controversial CMMC program

After a nine-month review, the Defense Department is replacing its original cyber compliance program for the industrial base with CMMC 2.0, putting more emphasis on self-assessment.

  • By Adam Mazmanian

White House pick for DOD CIO eyes tweaks to CMMC

The Biden administration's pick to be the Pentagon's tech chief wants to make it easier for small businesses to adhere to the Defense Department's cybersecurity standards and expand network optimization across the entire enterprise.

  • By Lauren C. Williams

CMMC's Arrington sues DOD to clear her name

Katie Arrington, who has been off the job since May, is suing the Department of Defense to get resolution on her personnel case.

  • By Adam Mazmanian

DOD wants industry to continue with CMMC prep amid program review

Dr. Christine Michienzi, the chief technology officer for the Office of the Deputy Assistant Secretary of Defense for Industrial Policy, said while results were coming soon, defense contractors should "continue on" with updates to cybersecurity practices as DOD finalizes its review of its Cybersecurity Maturity Model Certification program.

DOD's silence on CMMC is worrying industry, trade groups claim

Months of silence from the Defense Department on the status of the Cybersecurity Maturity Model Certification program is palpable and stirring unease among defense contractors, trade associations say in a letter to Deputy Defense Secretary Kathleen Hicks.

  • By Lauren C. Williams

CMMC board chief talks assessors, IT staff

Matt Travis, the CEO for the Cybersecurity Maturity Model Certification Accreditation Body, said proper training and IT access to the Defense Department's Enterprise Mission Assurance Support Service (eMASS) application, which will house CMMC data, still needs to be finalized for the third-party organizations that will be charged with conducting cyber assessments.

  • By Lauren C. Williams

DHS eyes CMMC model

DHS' Office of the Chief Procurement Officer issued a special notice Aug. 10, noting that it is looking for a way to check contractors' compliance with its cyber hygiene clauses released in 2015.

  • By Lauren C. Williams

Small businesses ask Congress to focus CMMC on primes and DOD

Jonathan Williams, a partner at the Washington, D.C.-based law firm PilieroMazza, told lawmakers much of small businesses concerns could be assuaged if DOD and prime contractors shoulder the burden.

  • By Lauren C. Williams

First CMMC assessment organization approved

The accrediting body overseeing the Defense Department's Cybersecurity Maturity Model Certification program announced the debut of the first organization authorized to assess defense contractors.

  • By Lauren C. Williams

CMMC assessor training expected in late summer

The professional training needed to carry out assessments for the Defense Department's unified cybersecurity standard for contractors won't kick off until later this summer.

  • By Lauren C. Williams
Featured eBooks

Is it time to test the limits -- and potential -- of expanding CMMC?

Calls for a certified baseline of cybersecurity seem to increase with every cyberattack. Is the CMMC model the right template for a universal and independently verifiable way to protect supply chains?

  • By Lauren C. Williams

CMMC board adds new training head, board members

Melanie Kyle Gingrich will take over training daily operations for the Cybersecurity Maturity Model Certification Accreditation Body as the vice president of training and development.

  • By Lauren C. Williams

CMMC announces new advisory council to collect industry feedback

The new organization will eventually produce regular public reports and address common industry concerns like the cost of implementation.

  • By Lauren C. Williams

Space Force satellite communications contract gets nod for CMMC

A request for information for the Inmarsat Broadband Global Area Network and Global Xpress contract was amended March 31 to include requirements for the CMMC pilot program.

  • By Lauren C. Williams

Mandatory review of DOD's compliance on CMMC is delayed

The Defense Department was supposed to submit a review to Congress by March 1 assessing whether components complied with the guidelines of the Cybersecurity Maturity Model Certification program. That deadline has been pushed to June.

  • By Lauren C. Williams

First set of CMMC certification orgs emerge

The Defense Department's unified cybersecurity program is making gains with its first tranche of certifying bodies, but assessments for defense contractors are a ways off.

  • By Lauren C. Williams

CMMC board preps for staff changes

The body in charge of standing up and running the Defense Department’s unified cybersecurity standard is shifting its staffing arrangement.

  • By Lauren C. Williams