News and Information

Government representatives have stated that complying with CMMC 2.0 Level 2 shouldn’t cost contractors or the government anything, because contractors have been…

Documentation templates which can help create a robust cybersecurity strategy. Useful for CMMC, NIST SP 800-171, and more.

Imagine the following scenario: As part of Project Road Runner, a new initiative, the United States Army, a portion of the Department…

The DoD CIO's office held a town hall on 2022-FEB-10. They discussed a variety of topics including CMMC 2.0. Several take-aways came…

NIST SP 800-171 can be overwhelming for contractors. In this article, we present a prioritized approach to implementing the 110 controls of…

The US Department of Defense published the Level 1 Self-Assessment Guide for CMMC 2.0 on 13-DEC-2021.

The US Department of Defense updated their main website (OUSD A&S – Cybersecurity Maturity Model Certification (CMMC) (osd.mil)) to include an updated…

Successful implementations are not measured by scores. The most valuable elements to a successful implementation do not have a weighted value.

With CMMC 2.0, DoD removed process maturity as an assessed requirement. Some commentators are suggesting that NIST 800-171's "NFO" controls inherently require…

Former CMMC-AB board of directors James Goepel, Mark Berman, and Ben Tchoubineh authored a letter to the President which analyzes why CMMC…

DoD submitted but quickly withdrew an "advanced notice of proposed rulemaking" entitled "Cybersecurity Maturity Model Certification 2.0 Updates and Way Forward".

The CMMC-AB’s July town hall will be held July 27 from 6-7 PM Eastern. Click here to register. As always, the event…