On Jan. 31, the Office of the Undersecretary of Defense for Acquisition and Sustainment (OSD) released the final version of the (CMMC). The Department of Defense (DOD) will begin including the final CMMC model as 鈥済o/no go鈥 in all new solicitations starting in late summer/early fall of 2020. On the same day, defense officials held a discussing the final version of CMMC. For further information on this, click 鈥渓earn more.鈥
The purpose of CMMC is to become the 鈥渦nified cybersecurity standard鈥 for all DOD contractors, including subcontractors. Under this model, all defense contractors will be required to be certified among the different CMMC levels (1-5) in order to be eligible for contract award. The level of security is determined based on the security requirement needs for each contract. This differs from previous cybersecurity mandates as CMMC will require contractors to obtain third-party accreditation. The standards for third-party accreditors is being developed by the .
黑料不打烊 has the difficulty many contractors have had implementing these new cybersecurity requirements and the challenges that the new model brings. OSD has acknowledged the challenge of being compliant with CMMC, but suggest a firm鈥檚 鈥減olicies, plans, processes, and procedures鈥 may offset the need for full compliance.
Late last year, 黑料不打烊 hosted a that discussed how contractors should begin to prepare. The standard and other requirements will be discussed at this year鈥檚 in Washington, D.C.
For more information, contact Jordan Howard at jordan.howard@agc.org or (703) 837-5368.