Earlier this year, the General Services Administration added enhanced cybersecurity requirements for defense contractors to one of its newest governmentwide IT contracts. GSA also plans to add rules in line with the Pentagon’s Cybersecurity Maturity Model Certification, which requires defense contractors to obtain third-party assessments proving their networks meet a specific standard of security. In its $50 billion STARS III contract for small, disadvantaged prime contractors providing IT services, GSA reserved the right to require CMMC level 1 certifications.
Cybersecurity, Privacy, & AI
Trending Now
Cyber Leaders Wary of Giving Agentic AI Too Much Authority • New ‘Water Watch Center’ Launched to Help Small Utilities Stop Cyberattacks • TikTok Can Be on Government Phones. Managing It Comes Next. • CISA, FBI and Partners Detail Gunra Ransomware Tactics • NIST Wants to Overhaul Its Vulnerability Database for the AI Age
GSA Considering More CMMC-like Cyber Requirements in Its Governmentwide Contracts
Rena Schild | Shutterstock
Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.