Pentagon pores over heaps of industry feedback on CMMC reform
Input from contractors is expected to inform the department's reforms to the Cybersecurity Maturity Model Certification program.
Advertisement
Cybersecurity Maturity Model Certification (CMMC)
Sonu Shankar appointed as Pentagon principal deputy CIO
Shankar, who previously served as a strategic advisor to the department via the BOND program, was officially sworn-in Aug. 24.
Pausing CMMC cannot mean pausing accountability
The answer is to modernize accountability through an enterprise model that combines a formalized independent assessment, continuous external monitoring, and shared remediation support where small suppliers cannot…
Pentagon task force to review CMMC hits the ground running
The task force held its first meeting Thursday, just days removed from CIO Kirsten Davies initiating a pause of CMMC phase 2 requirements and a review of…
DOD halts cybersecurity requirements for CMMC Phase 2: ‘The math just simply doesn’t math’
CIO Kirsten Davies told reporters that the current instantiation of CMMC has become too bureaucratic and burdensome on the industrial base.
Stop building custom IT: A smarter approach to tech adoption in the defense sector
By adopting pre-accredited cloud platforms, defense organizations can bypass laborious compliance hurdles and redirect critical resources to AI tools, argues CIO.
Advertisement
What the Pentagon’s new post-quantum cryptography directive means for defense contractors
The Defense Department wants to introduce PQC requirements into the CMMC program, but experts warn industry and the underlying technology is far from ready.
Defense contractor settles cybersecurity False Claims Act allegations
While not an explicit violation of the CMMC program, the suit highlights the Defense Department’s increasing scrutiny of the defense industry not implementing required cybersecurity measures for…
Watchdog urges DOD to address external factors affecting CMMC implementation
A new report from the Government Accountability Office found that the Pentagon has not completely identified factors beyond its control that risk the CMMC program’s overall success.
ISACA takes responsibility of training, credentialing CMMC assessors
ISACA has assumed responsibility as Cybersecurity Assessor and Instructor Certification Organization, and will work to scale the number of third-party CMMC assessors to meet a rising demand.