By Lauren C. Williams
Dec 23, 2020
The Defense Department has released the first contracts that could include the Cybersecurity Maturity Model Certification requirement for contractors that’s aimed to make the defense industry base’s infrastructure more secure.
The Dec. 15 announcement calls out seven pilot contracts: the Technical Advisory and Assistance contract for the Missile Defense Agency; the Azure Cloud Solution, Mobility Air Force Tactical Data Links, and Consolidated Broadband Global Area Network Follow-On contracts for the Air Force; and the Navy’s Integrated Common Processor, F/A-18E/F Full Mod of the SBAR and Shut off Valve, and yard services for the Arleigh Burke Class destroyer contracts.
DoD announces cybersecurity certification pilots December 16, 2020 The DoD released selected acquisitions to pilot the forthcoming CMMC. (Petty Officer 1st Class Luke Pinneo/U.S. Coast Guard) WASHINGTON The Department of Defense has outlined what contracts will initially fall within its Cybersecurity Maturity Model Certification. The CMMC is a tiered cybersecurity framework that grades companies on a scale of one to five. A score of one designates basic cyber hygiene and a five represents advanced hygiene. Top officials at the DoD have said the process will not be retroactive, and as part of the rollout, it will seek to pilot contracts before all contracts will feature it going forward.
By Lauren C. Williams
The Defense Department has released the first contracts that could include the Cybersecurity Maturity Model Certification requirement for contractors that’s aimed to make the defense industry base’s infrastructure more secure.
The Dec. 15 announcement calls out seven pilot contracts: the Technical Advisory and Assistance contract for the Missile Defense Agency; the Azure Cloud Solution, Mobility Air Force Tactical Data Links, and Consolidated Broadband Global Area Network Follow-On contracts for the Air Force; and the Navy’s Integrated Common Processor, F/A-18E/F Full Mod of the SBAR and Shut off Valve, and yard services for the Arleigh Burke Class destroyer contracts.
With CMMC rolling out, this list of seven programs could touch 700 companies
The Defense Department has now released an initial group of contracts that will require the third-level certification out of five under the Defense Department s new CMMC cyber standards for contractors.
The Cybersecurity Maturity Model Certification is DOD’s effort to get contractors to verify how they protect government information that resides in their systems. CMMC will apply to tens of thousands of contractors, so DOD is implementing a phased-in approach.
We have seen CMMC pop up in other contracts as it has already been included as a requirement in the General Services Administration s Polaris and 8(a) STARS III small business vehicles.