Cybersecurity

CMMC clears key regulatory hurdle

The White House approved an interim rule to mandate defense contractors prove they adhere to existing cybersecurity standards from the National Institute of Standards and Technology.

Acquisition

Shakeup at CMMC board

The independent board charged with implementing the Defense Department's unified cybersecurity standard has new leadership as it announces new milestone hit.

Modernization

CMMC reciprocity guidelines are still a work in progress

The Defense Department is hoping to begin rolling its Cybersecurity Maturity Model Certification program later this year, but questions remain about how reciprocity with FedRAMP will be handled.

Cybersecurity

CMMC training registration opens, but implementation worries persist

The first cadre of DOD cybersecurity assessors is expected to graduate by early August, but concerns loom over Cybersecurity Maturity Model Certification.

Cybersecurity

NSA launches pilot program to secure defense contractors

The National Security Agency is testing a secure domain name system model to better secure companies in the defense industrial base, which houses much of the nation's weapons technology.

Cybersecurity

Supplier ownership should be considered in assessing supply chain risk

Many vendors lack transparency into their own supply chains. So how can vendors – as well as their government customers — be assured that their sub-tier suppliers do not pose threats or vulnerabilities?