Call us now:
In recognition that cybersecurity is a significant risk to the US Federal Government and the important role of the US General Services Administration(GSA). The GSA announced earlier this year that it is implementing the Cybersecurity Maturity Model Certification program, following the United States Department of War methodology, for all its contractors.
This week, the GSA, which acts as a primary procurement vehicle for DoW procurement, expanded on its commitment to ensure that GSA contractors comply with CMMC, for GSA contracts that impact the DoW. In addition to the GSA’s own commitment to implement CMMC requirements across US Federal contracts.
This adds a further layer of contractors that must comply with CMMC. The GSA has affirmed that contractors that provide products and services through the GSA to the DoW must comply with CMMC. Expanding the scope of covered products and services impacted by CMMC.
If contactors hold FCI, they will be required to comply with CMMC level 1. Those who create, process, store, or transmit CUI in addition must comply with CMMC Level 2 and Level 3.
Agencies rely on GSA’s expertise in IT acquisitions and the federal government’s collective buying power to ensure that products added to their IT environments meet security and risk management expectations and do not compromise network security. To that end, contractors should prepare for and become familiar with the CMMC level requirements.
CMMC is not just a US contractor obligation; it’s an obligation that will affect contractors globally.
@Thaddeus Dziekanowski Brian D. McCarthy
@Parava Security Solutions
#cybersecurity #cyberriskmanagement
https://lnkd.in/eR-G8-Zf
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7428391833061371904