“The Pentagon will finalize and announce changes to its Cybersecurity Maturity Model Certification program ‘very soon,’ as it looks to strike a balance between increasing the security of the defense industrial base and addressing cost concerns about the cybersecurity auditing program, according to a Defense Department acquisition official.
Christine Michienzi, chief technology officer for the deputy assistant secretary of defense for industrial policy, said DoD is continuing to revise the CMMC program based on feedback from industry and ‘internal government activities.’…”
“Asked whether companies should change what they’re doing as they await the results of the review, Michienzi said they shouldn’t make ‘any major changes’ with guidance coming out shortly.
‘We will be finalizing any changes to CMMC very soon, and we will be transmitting that to you,’ she said. ‘But I would just continue on the way you are until that time comes, because there is going to be still the need to have cybersecurity practices in place, to have them verified and validated some in some way.’…” Read the full article here.
Source: Pentagon official says CMMC changes will be finalized ‘very soon’ – By Justin Doubleday, September 14, 2021. Federal News Network.