I do not know how accurate the costs for CMMC compliance are; that depends on maturity, resources, efficiency, and quality.

← Back to Blog

I do not know how accurate the costs for CMMC compliance are; that depends on maturity, resources, efficiency, and quality.

But I do know two things: that the cost of cyber compliance will vary, probably from the £100,000s to $1.000,000s, as demonstrated by industries such as Financial Services, that have been regulated to comply with cybersecurity across the 3 Lines of Defence. I also know that it takes a long time to comply with cyber regulations, that it’s not uncommon to spend 12 months to put in place a cybersecurity program for a mid-sized company, employing around 250 FTE, depending of course, on maturity.

The problem for the DIB with both these observations is that they don’t have the money for cyber compliance, and they do not have the time. Cyber compliance under CMMC is based on cyber compliance for DFARS 7012, and that dates back to 2016. The DoD has stated previously that CMMC compliance is not a new obligation, as contractors will have complied with DFARS 7012.

Here lies the problem for the DIB. The DoD is introducing CMMC into contracts today, requiring compliance today.

@Thaddeus Dziekanowski Brian D. McCarthy

@Parava Security Solutions

#cmmc #dfars

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7460961094392688640