Sonu Shankar appointed as Pentagon principal deputy CIO
Shankar, who previously served as a strategic advisor to the department via the BOND program, was officially sworn-in Aug. 24.
Advertisement
Cybersecurity Maturity Model Certification (CMMC)
Pausing CMMC cannot mean pausing accountability
The answer is to modernize accountability through an enterprise model that combines a formalized independent assessment, continuous external monitoring, and shared remediation support where small suppliers cannot…
Pentagon task force to review CMMC hits the ground running
The task force held its first meeting Thursday, just days removed from CIO Kirsten Davies initiating a pause of CMMC phase 2 requirements and a review of…
DOD halts cybersecurity requirements for CMMC Phase 2: ‘The math just simply doesn’t math’
CIO Kirsten Davies told reporters that the current instantiation of CMMC has become too bureaucratic and burdensome on the industrial base.
Stop building custom IT: A smarter approach to tech adoption in the defense sector
By adopting pre-accredited cloud platforms, defense organizations can bypass laborious compliance hurdles and redirect critical resources to AI tools, argues CIO.
What the Pentagon’s new post-quantum cryptography directive means for defense contractors
The Defense Department wants to introduce PQC requirements into the CMMC program, but experts warn industry and the underlying technology is far from ready.
Advertisement
Defense contractor settles cybersecurity False Claims Act allegations
While not an explicit violation of the CMMC program, the suit highlights the Defense Department’s increasing scrutiny of the defense industry not implementing required cybersecurity measures for…
Watchdog urges DOD to address external factors affecting CMMC implementation
A new report from the Government Accountability Office found that the Pentagon has not completely identified factors beyond its control that risk the CMMC program’s overall success.
ISACA takes responsibility of training, credentialing CMMC assessors
ISACA has assumed responsibility as Cybersecurity Assessor and Instructor Certification Organization, and will work to scale the number of third-party CMMC assessors to meet a rising demand.
Pentagon begins enforcing CMMC compliance, but readiness gaps remain
Experts told DefenseScoop that readiness gaps are fueled by CMMC’s controversial history, misconceptions of what the rule change means and challenges in proving compliance.