Call us now:
The US DoW CMMC program is gradually making its way into DIB contracts, and as long as the DoW stays on mission to require its contractors manage cybersecurity risk, it will continue to do so.
I say ‘as long as’, for the fact that covered companies will be required to present a certificate of CMMC compliance to the DoW, and their covered contractor, if they wish to tender for and win a DoW covered contract, and there aren’t enough CCAs in the marketplace to cover the required number of assessments.
@Thaddeus Dziekanowski I published the enclosed Code of Federal Regulation (CFR) for the US DoW CMMC program. It defines rules by which CMMC operates, its compliance requirements, oversight, assurance, and assessment methods for DIB contractors to meet CMMC compliance.
It’s an important read. In the case of certification, it identifies that a certificate assessment requires 2 CCAs and a quality assurance professional, operating through a C3PAO. That is 3 FTE per certificate assessment and a C3PAO.
Today, there aren’t enough assessors to complete US certifications. How will EU defence contractors be certified from November 2026?
@Parava Security Solutions United States Department of War
#cmmc #cybersecurity
https://lnkd.in/ewFFMRWg
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7426900084165890048