CMMC is being driven forward by the US DoD as the standard for Cyber Security oversight and assurance across it’s Defence Industry Base (DIB).

← Back to Blog

CMMC is being driven forward by the US DoD as the standard for Cyber Security oversight and assurance across it’s Defence Industry Base (DIB). With between 300,000 and 350,000 companies in the supply chain, ranging from SMEs up to large corporates will be impacted by the programme.

The 5 levels of certification will be based upon the holding of FCI or CUI data. With companies holding CUI, likely being assessed as a level 3, required to comply to a range of controls as defined by NIST 800 171 r2. Companies at level 1 against Federal Acquisition Regulation.(https://lnkd.in/etuPH6Q).

The programme will ultimately create the standard for cyber security compliance against NIST across the DIB. Whilst it defines the references for good cyber security controls the challenge for companies big and small will be how to comply and maintain compliance. And challenge for those delivering oversight will be how to assess and accredit those companies.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6663021122998595584