Kevin Barnett

With all the noise and hype around Cybersecurity Maturity Model Certification (CMMC) compliance, it can be hard to track what practical steps an organization should take to ensure that it is still able to bid on government contracts or participate as a subcontractor within the Defense Industrial Base. The good news is that CMMC is just another data security standard, and, as with many other standards, compliance can be broken down into small, achievable steps regardless of the starting point.

The landscape is shifting under the feet of government contractors as it is quickly becoming apparent that those who do not assess their security obligations now may be excluded from contract awards in the near future: Contractors in the Department of Defense (DoD) supply chain are facing challenges with implementing Cybersecurity Maturity Model Certification (CMMC) requirements, including questions internally and from third parties around classifying controlled unclassified information (CUI).

The landscape is shifting under the feet of government contractors as it is quickly becoming apparent that those who do not assess their security obligations now may be excluded from contract awards in the near future: Contractors in the Department of Defense (DoD) supply chain are facing challenges with implementing Cybersecurity Maturity Model Certification (CMMC) requirements, including questions internally and from third parties around classifying controlled unclassified information (CUI).