Contracts
Industry seeks more clarity on final CMMC rule
The cybersecurity certification will move forward even as companies continue to have questions about what defines controlled but unclassified information, cloud services and other requirements.
Breaking News
Contracts
CMMC's final rule has now landed
Several other regulatory steps and Congress' 60-day period to review the defense industrial base's new cybersecurity standard still loom before it takes effect.
Contracts
DOD unveils proposed final rule for CMMC contracting
A phased rollout of the cybersecurity standard should begin in early 2025, with varying compliance levels and increased program office discretion.
Opinion
The coming cyber reckoning for federal contractors
Contractors face a 90-day deadline to prove their cybersecurity compliance as awards for the OASIS+ vehicle start to fall and that is a precursor to broader industry-wide requirements, DTS CEO Edward Tuorinsky writes.
Opinion
5 steps to building an early advantage in CMMC
With CMMC on the horizon, Redspin's chief information security officer Thomas Graham explains the five steps organizations should take to show they are an early adopter.
Opinion
Why a hybrid approach can help you navigate CMMC Level 3
Blending FedRAMP High and a commercial cloud environment can be an efficient way to reach CMMC Level 3 while optimizing your security and costs, writes Andrew Bream, vice president of enterprise IT at SOSi.
Contracts
NIST issues new guidelines on protecting unclassified data in government systems
The framework considers the private sector’s increased role in helping the federal government in day-to-day operations and aims to reduce the risk of supply chain cyberattacks.
Podcasts
WT 360: Steps to take now as you prepare for CMMC
Cyber industry executive Felipe Fernandez offers insights on the actions companies should take now as the Cybersecurity Maturity Model Certification rule moves toward becoming final.
Contracts
CISA rolls out secure software attestation form
A repository for software attestation submissions will be available later in March.
Contracts
Nearly 300 comment on proposed CMMC rule
The Defense Department now has to process and respond to the comments before it issues the final version of the industry-wide rule in the fall.
Podcasts
WT 360: CMMC lessons from the voluntary assessment program
Derek Kernus explains how his company went through the Defense Department's assessment process for complying with the standards at the heart of CMMC, the rule that will lay out how contractors protect information on their systems.
Opinion
CMMC's effective date appears likely to be early 2025
The Defense Department needs to adjudicate comments and Congress needs to review the final rule on how contractors protect information before the standard takes effect.
Contracts
Experts expect some support for small businesses facing CMMC compliance
The Pentagon’s draft CMMC rule doesn’t exempt small firms from the security standards for defense contractors and subcontractors, but that doesn’t mean they won’t receive any help meeting the requirements.
Opinion
Five lessons learned as you prepare for CMMC
Cybersecurity expert Derek Kernus explains what was learned when a small business client went through a voluntary Defense Department assessment of how it protects controlled, unclassified information, meeting many of the CMMC requirements.
Podcasts
WT 360: A look inside GovCon's crystal ball for 2024
Stephanie Smith, RSM's GovCon guru and our first guest for 2024, lays out key themes and discussion points that are poised to shape the industry during this new year.
Contracts
CMMC hot take: What stands out in the draft rule
This video conversation features Matt Travis, CEO of the Cyber AB, and Eric Crusius, partner with Holland & Knight, who give their first impressions on the draft CMMC rule and where things go from here.
Opinion
Five things to remember about CMMC
The draft rule for how government contractors will protect their customers' information is long and defense as it was two years in the making, but here are five things to keep in mind in putting together your comments.
Contracts
DOD plans four-phase roll out of CMMC
The Defense Department expects companies will need two years to be fully compliant with this new standard for protecting information on their systems.
Opinion
UPDATE: CMMC's proposed rule is published
After much anticipation, the proposed new standard for the defense industrial base's overall cyber posture is available for download now.
Opinion
SBOMs are a needed ingredient but not the full recipe for software supply chain security
Validating the integrity of IT supply chains is critical to cybersecurity and includes the supply chain feeding software development.
Almost There!
Help us tailor content specifically for you: