After a lengthy internal review process, the Department of Defense (DoD) released its Cybersecurity Maturity Model Certification (CMMC) 2.0 requirements in November and is now in the early stages of a rulemaking process to implement the revised program. […]
Tags
Cybersecurity Maturity Model Certification
Despite the Department of Defense’s (DoD) efforts to add its Cybersecurity Maturity Model Certificate (CMMC) program to its acquisition process beginning in 2021 and up until full implementation in fiscal year (FY) 2026, a new report from the Government Accountability Office (GAO) found that DoD has not met its implementation goals, nor properly communicated key decisions with industry. […]
Cybersecurity experts stressed this week that Federal agencies must keep stay focused on future threats and on moving toward adoption of zero trust security concepts, although they acknowledged that the latter tasks is “easier said than done.” […]
The interim rule for the Cybersecurity Maturity Model Certification was posted in the Federal Register on Sept. 29, opening a public comment period for the amended regulation, which is scheduled to become effective November 30. […]
The Department of Defense (DoD) has had an ongoing problem – the cybersecurity of its defense industrial base contractors. An interim rule scheduled to be published in the Federal Register tomorrow is the department’s next step in addressing that problem. […]
One of the Licensed Partner Publishers selected last week to provide training materials for the Cybersecurity Maturity Model Certification Accreditation Body told MeriTalk this week he expects that some of the training materials will be publicly released beginning next month. […]
Another piece of the Cybersecurity Maturity Model Certification puzzle has fallen into place with the Accreditation Body announcing 11 companies as Licensed Partner Publishers who will develop curricula for the Department of Defense’s new cybersecurity standard for its supply chain companies. […]
The vice chair of the board of directors of the CMMC-AB said that 25 assessors have been provisionally trained, and estimated that certified assessors for the open market will be released in the first quarter of calendar year 2021. […]
The new cybersecurity standard for contractors in the Department of Defense’s (DoD) supply chain ecosystem is soon to have regulatory backing, according to Katie Arrington, CISO for Acquisition and Sustainment at the DoD. […]
The first group of assessors for the Department of Defense’s new cybersecurity standard will begin training today, according to a press release from the Cybersecurity Maturity Model Certification Accreditation Body. […]
The Defense Department expects to issue a final request for proposal late next month for its multiyear Defense Enclave Services IT contract worth up to $11.7 billion. […]
Ellen Lord, the Defense Department’s (DoD) undersecretary of Defense for Acquisition and Sustainment, provided updates on August 13 on pathfinder projects and database construction for DoD’s Cybersecurity Maturity Model Certification (CMMC) program that aims to strengthen cybersecurity throughout the U.S. defense industrial base (DIB). […]
CMMC Academy, an initiative of the cybersecurity firm Celerium, has set a July 22 event to walk companies through the certification process for the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC). […]
The group charged with overseeing implementation of new cybersecurity standards for Department of Defense supply chain companies has released its requirements for third-party assessors – the next step in a multi-year process designed to better secure the defense industrial base. […]
Assessors for the new cybersecurity standard for contractors of the Department of Defense have not yet been selected, but a Department of Homeland Security official praised DoD’s efforts and said his department is looking toward their example. […]
The Accreditation Body responsible for orchestrating the implementation of the Defense Department’s (DoD) new cybersecurity standard for contractors released two requests for information on May 27 as the organization looks to begin training assessors this summer. […]
DevSecOps, or development security operations, is not a term that rolls off the tip of your tongue in an “agile” way, but it is a process that is gaining momentum across the Federal government. […]
While the fight regarding the JEDI cloud computing contract between Amazon Web Services (AWS) and the Pentagon drags on, AWS is partnering with the Department of Defense (DoD) in another capacity – the department’s cybersecurity standard for contractors. […]
Katie Arrington, Cybersecurity Maturity Model Certification (CMMC) lead and CISO for acquisition at the Department of Defense’s (DoD) Undersecretary of Defense, confirmed that the CMMC and FedRAMP (Federal Risk and Authorization Management Program) offices are working on a way to grant reciprocity between the two certifications. […]
Cybersecurity Maturity Model Certification (CMMC) Accreditation Body (AB) Chair Ty Schieber and Department of Defense (DoD) Under Secretary of Defense for Acquisition and Sustainment Katie Arrington shared new insights on what CMMC-AB looks like and how companies can expect to interact with it. […]
The Defense Department may just be beginning to implement its new cybersecurity standards for the defense industrial base, but the head of the program said on April 16 she is aiming for the certification program to become the “basis for a global standard” on security. […]
The fifteen-member Cybersecurity Maturity Model Certification Accreditation Body hosted an online meeting of thousands today, with the biggest news being that no third-party assessment groups have yet been appointed to help in the effort by the Defense Department (DoD) to create formal cybersecurity certifications for defense industrial base firms. […]
The Department of Defense is working to get the word out about its new cybersecurity certification for contractors in the Defense Industrial Base. […]
Katie Arrington, CISO for acquisition at the Department of Defense, says a rule change on the Cybersecurity Maturity Model Certification (CMMC) will benefit small businesses looking to work with the Defense Department. […]
The Department of Defense (DoD) released the final version of its Cybersecurity Maturity Model Certification (CMMC) in January 2020, but without certification processes in place, third-party entities are offering fraudulent CMMCs to contractors interested in working with the department. […]
The Department of Defense (DoD) has released the final version of its Cybersecurity Maturity Model Certification (CMMC), which aims to certify DoD contractors’ cybersecurity practices and bolster supply chain security. […]
The Department of Defense is making progress on both its Cybersecurity Maturity Model Certification (CMMC) and a new policy on software development in the department, said Ellen Lord, undersecretary of acquisition at the Pentagon, in a press conference today. […]
The Department of Defense released a draft version of its Cybersecurity Maturity Model Certification (CMMC), dated August 30, offering a glimpse into how the department plans to apply cybersecurity requirements to its contractors in the near future. […]
Federal and Defense officials spoke at today’s Billington Cybersecurity Summit about procurement cybersecurity challenges they face and the initiatives they’ve launched to combat those hurdles by shifting toward a “security first” approach to acquisition and supply chain management. […]
The Defense Department (DoD) Office of Under Secretary Acquisition of Sustainment is creating a new certification model to streamline DoD’s cybersecurity acquisition processes, Special Assistant to DoD’s Assistant Secretary of Defense Acquisition for Cyber Katie Arrington said at the Professional Services Council Federal Acquisition Conference today. […]