Katie Arrington, CISO for acquisitions at the Department of Defense, has suggested it might be necessary to revise the CMMC standard to address the high costs associated with validating procurements at the very top of the tiered model. “There’s a lot of discussion I think yet to be had on level four and five,” she noted. Arrington questioned whether there is a return-on-investment in implementing all of the controls at each of those top levels, as department officials accept that vendors will include the cost of the cybersecurity certification in their proposals.
Cybersecurity, Privacy, & AI
Trending Now
Cyber Leaders Wary of Giving Agentic AI Too Much Authority • New ‘Water Watch Center’ Launched to Help Small Utilities Stop Cyberattacks • TikTok Can Be on Government Phones. Managing It Comes Next. • CISA, FBI and Partners Detail Gunra Ransomware Tactics • NIST Wants to Overhaul Its Vulnerability Database for the AI Age
DOD Official: Upcoming Cybersecurity Requirements Could Still Significantly Change Based on Industry Feedback
G-Tech Studios | Shutterstock
Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.