Pentagon Finalizes CMMC Standard for Contractors

The Pentagon on Jan 31 released the official version 1.0 of its unified cybersecurity standard that all contractors must meet by 2026.

The standard, called the Cybersecurity Maturity Model Certification (CMMC), will apply to any company that does business with the Department of Defense, from weapons contractors protecting highly classified intellectual property to landscaping firms that service DOD installations. CMMC will apply to subcontractors as well as primes.

Under Secretary of Defense for Acquisition and Sustainment Ellen Lord told reporters during a Jan. 31 briefing that CMMC will be a “complicated rollout” and that the five-year timeline was “realistic” before making it mandatory in all contracts.

Read more at FCW

PERSPECTIVE: CMMC Is a Regulatory Time Bomb for Federal Contractors

Homeland Security Today

The Government Technology & Services Coalition's Homeland Security Today (HSToday) is the premier news and information resource for the homeland security community, dedicated to elevating the discussions and insights that can support a safe and secure nation. A non-profit magazine and media platform, HSToday provides readers with the whole story, placing facts and comments in context to inform debate and drive realistic solutions to some of the nation’s most vexing security challenges.

See Full Bio