The task force held its first meeting Thursday, just days removed from CIO Kirsten Davies initiating a pause of CMMC phase 2 requirements and a review of…

CIO Kirsten Davies told reporters that the current instantiation of CMMC has become too bureaucratic and burdensome on the industrial base.

The Defense Department wants to introduce PQC requirements into the CMMC program, but experts warn industry and the underlying technology is far from ready.

While not an explicit violation of the CMMC program, the suit highlights the Defense Department’s increasing scrutiny of the defense industry not implementing required cybersecurity measures for…

A new report from the Government Accountability Office found that the Pentagon has not completely identified factors beyond its control that risk the CMMC program’s overall success.

ISACA has assumed responsibility as Cybersecurity Assessor and Instructor Certification Organization, and will work to scale the number of third-party CMMC assessors to meet a rising demand.

Experts told DefenseScoop that readiness gaps are fueled by CMMC’s controversial history, misconceptions of what the rule change means and challenges in proving compliance.

The amendment to the Defense Federal Acquisition Regulation Supplement marks the near end of a years-long effort to enforce CMMC 2.0 cybersecurity standards for defense contractors.

Arrington comes back to the Pentagon where she was the chief information security officer for the department's acquisition and sustainment organization during the first Trump administration.