2022 saw a lot of changes to the CMMC program, and even to the government’s approach to supply chain cybersecurity. In this post, we summarize some of the key DoD-related changes in an effort to help contractors understand what they will likely encounter in 2023.
Successful implementations are not measured by scores. The most valuable elements to a successful implementation do not have a weighted value.
The Executive Order issued May 12, 2021 on Improving the Nation’s Cybersecurity casts some clouds over the CMMC program. This article provides short-term guidance for defense contractors.
Prime contractors should balance the need to manage their subcontractors against the risks of holding sensitive subcontractor information before requesting SPRS scores or assessment details.