How will the changes to the CMMC Rule going final affect your business?
This special edition of As the CMMC Churns will help to clarify.
Matt Titcombe, the CEO of Peak InfoSec will put on his old Air Force Program Manager hat to explain. By setting the backdrop of the Defense Acquisition System and the Federal Government’s Fiscal Year timelines, business executives will get a sense of the two timelines for when CMMC–the 3rd party certification of your organization’s implementation of NIST SP 800-171–will come into effect. Shmaybe.
Key CMMC Organizations
- National Archives & Records Administration Controlled Unclassified Information (CUI) Homepage
- DoD CIO’s Cybersecurity Maturity Model Certification (CMMC) Home Page
- Cyber Accreditation Body (Cyber-AB)
- Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page
- Defense Industrial Base (DIB) Cybersecurity Portal
Key Regulations
Key Acquisition References
- 48 CFR § 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems
- DFARS Clause 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.
- DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
- DFARS Clause 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS Clause 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
- DFARS Clause 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements.
