Calls for a certified baseline of cybersecurity seem to increase with every cyberattack. And the recent ransomware attack that shut down the East Coast's largest fuel pipeline, Colonial Pipeline, is no exception. The Cybersecurity Maturity Model Certification program is one of several Defense Department efforts to improve both its own cyber defenses and those of its industry partners. CMMC has been touted as a potential standard that could expand beyond the Defense Industrial Base (DIB) to cover all government contractors. But the core CMMC program is still taking shape, and it's unclear how that will look in the future.