CMMC is not the holy grail of supply chain risk management, but it is one of the most effective tools for validating that information security vulnerabilities are being addressed, writes CMMC expert Aron Freitag.
The clock is ticking for contractors to comply with the Department of Defense’s (DoD) long-anticipated cybersecurity compliance policy.
Engage a CMMC certified professional or assessor, or at least assess your contracts and clarify CUI expectations with your contracting officer.
The Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program officially went into effect on December 16, 2024, and it kicked off with a bang.
CMMC compliance is now critical for defense contractors, with hidden cloud costs, unclear provider roles and tenant ownership risks threatening budgets and certification. Without due diligence, the cheapest CMMC cloud option can quickly become the most costly.
Dr. Thomas Graham, vice president and chief information security officer at Redspin, lays out key principles for contractors to follow in the preparation and execution of their compliance with the Cybersecurity Maturity Model Certification.