CMMC has now been finalized, pending the 60 days before it’s added to the Federal Register.

← Back to Blog

CMMC has now been finalized, pending the 60 days before it’s added to the Federal Register. It’s still unclear how U.S defense contractors, by that one means Prime Contractors, will react and even less clear how the international defense base will move ahead with CMMC. Given that covered defense contractors and national governments will progress the necessary oversight and assurance of the CMMC program. Either through reciprocity of their existing cyber standards, allowing auditors from other jurisdiction to oversight their defense industry, or upskilling the local work force.

Whatever method is chosen, the CMMC is here. Albeit the defense industry has had since 2017 to comply with NIST SP 800-171.

But the risk of defense contracts being pulled for non-compliance is very real, without a certificate of compliance.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC United States Department of Defense

#cybersecurity #cyberriskmanagement #cmmc

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7251569261435916289