Alaska Federal Government issued the following announcement on Feb. 28.
Well, if you’d been waiting for DOD’s Cybersecurity Maturity Model Certification (CMMC) standards to stop being “draft” before you took a look at them, the wait is over! Version 1.0 (no longer marked draft) was released last week. DoD has indicated it will begin using CMMC requirements in requests for information starting June 2020. Let’s take a look at some of the highlights from the recent release.
As explored in a recent post, the standards are designed to protect Controlled Unclassified Information (CUI) held by defense contractors to avoid “loss of intellectual property” and “risk to national security.” Just as before, the standards will require third-party audit of contractors and will be proportional to the size of the contractor. Interestingly, a contractor can get the certification for “its entire enterprise network or for particular segment(s) or enclave(s).”
Original source can be found here.
Source: Alaska Federal Government