Industry Hopes CMMC Review Leads to Tweaks.

• Date: 01 June 2021
• Author: Tadjdeh, Yasmin
• Published date: 01 June 2021
• Author: Tadjdeh, Yasmin

One of the Pentagon's most high-profile programs is its Cybersecurity Maturity Model Certification effort. CMMC will eventually require all 300,000-plus companies working in the defense industrial base to meet certain levels of cybersecurity to protect against threats from adversaries and continue working with the Defense Department.

However, with a new administration installed at the Pentagon, the department recently announced that it had initiated an "internal assessment" of the program.

Katie Arrington, chief information security officer in the office of the undersecretary of defense for acquisition and sustainment, recently likened the assessment to a standard acquisition category, or AC AT, 1 review of major defense acquisition programs. The review will ensure "we're doing the implementation correctly internally," she said in April during a webinar hosted by Deltek. "That's actually been phenomenal [at]... helping us looking across the departments so we're not duplicating effort or anything like that."

In a statement to National Defense in early May, a Pentagon spokesperson offered no details on the timeline of when the review will be completed or what changes may be made.

With new leadership in place in the White House, it is a...