CMMC

DOD eyes June for final CMMC proposed rule release

The new cybersecurity standard for the defense industrial base will likely not be final until 2024. Companies still have options available to get ready before the final proposed rules go out.

  • By Nick Wakeman

How CMMC raises legal exposures for contractors and their suppliers

Compliance issues across the defense industrial base will grow after the final rule for this cyber standard goes live, but there are steps to take for understanding and limiting risks.

  • By Nick Wakeman

Key takeaways from WT's CMMC Summit

Cybersecurity leaders emphasized that the upcoming cyber and supply chain requirement for industry is more than just a compliance list, plus help to get ready is available to small businesses.

  • By Nick Wakeman

CMMC's 'father' warns companies not to wait for final rule

The final rule for this new cybersecurity standard for the defense industrial base is months away, but the author of its founding principles sternly says get to work now.

  • By Nick Wakeman

DHS looks to cyber self-assessments over CMMC model

DHS is considering how it might use self-assessments for vendors to measure their cyber hygiene—an approach that would set it apart from the Defense Department’s plans for third-party assessments.

  • By Natalie Alms

Why vendors can't wait for CMMC to raise their cyber standards

"The current geopolitical climate...should have companies thinking about how they are currently defending themselves against cyber attacks," a defense official said on Thursday.

  • By Lauren C. Williams