Call us now:
The US Government Accountability Office has released its report on Defence Contractor Cybersecurity and its evaluation of CMMC to date. It makes for an interesting read. In short, the report provides a useful roundup of the history of CMMC and its implementation to date. The GOA assessment has taken an inward look at the DoD’s CMMC program mission, strategy, goals, and objectives, and program office resources and risks.
The GOA highlighted external risks that could affect the ability of the CMMC program to meet its desired outcomes. The biggest of these is the ability of the CMMC program to enable enough assessors to conduct CMMC assessments and the effects that this will have on DoD weapon system deliveries across the DIB. Other than to issue waivers to enable delivery. Waivers that we’re not part of the CMMC plan. and send the wrong message to the DIB.
The CMMC program office needs to do more implementation planning. The GOA makes clear that it is not appropriate for the DoD to waive the CMMC requirement. The GAO highlights that the DoD has not addressed the necessary external factors that include providing enough resources to support the nearly 200,000 DIB contractors that require self-assessment and/ or CMMC certification. Increasing the risk that the CMMC program will not achieve its strategic goals.
There is no process in place to enable the international DIB, for example, to comply with the CMMC program requirements. An issue we have raised many times over the past 5 years.
@Thaddeus Dziekanowski Brian D. McCarthy
@Parava Security Solutions United States Department of War
#cybersecurity #cmmc
https://lnkd.in/eyYrZ_xp
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7438128134891220992