It’s Here!!!! For many, CMMC will be even scarier than the movie Poltergeist (a classic BTW).
Today, 15 October 2024, is the birthday of CMMC. While the unofficial, pre-release version hit the streets last Friday, today, the FINAL, OFFICAL version is out. It means a lot of changes are coming for everyone.
On that point, there a lot of LinkedIn posts flying back and forth about nit-noid crap, albeit important nit-noid crap. In this As the CMMC Churns, we are going to hit the strategic level first and then dive into the nit-noid stuff later.
Why? Because as a business leader, the strategic information is the most important that then is influenced by the tactical information (a.k.a., important nit-noid crap). So, what we going to cover?
When is CMMC going to roll out (when is this going to affect my company?)
What are the CMMC Levels (what level of rigor will we face?)
What is the Senior Affirming Official (who the #### is going to sign we are doing all of this?)
So, welcome back to As the CMMC Churns and contact us if you are interested in having us do your CMMC Level 2 Certification Assessment.
Key CMMC Organizations
- National Archives & Records Administration Controlled Unclassified Information (CUI) Homepage
- DoD CIO’s Cybersecurity Maturity Model Certification (CMMC) Home Page
- Cyber Accreditation Body (Cyber-AB)
- Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page
- Defense Industrial Base (DIB) Cybersecurity Portal
Key Regulations
Key Acquisition References
- 48 CFR § 52.204-21 – Basic Safeguarding of Covered Contractor Information Systems
- DFARS Clause 252.204-7008 Compliance with Safeguarding Covered Defense Information Controls.
- DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
- DFARS Clause 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS Clause 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
- DFARS Clause 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements.
