The Cybersecurity Maturity Model Certification Accreditation Body will remain the sole accreditor and oversight board implementing the Department of Defense’s new cybersecurity standards for contractors, despite rumors that there could be other organizations in the mix. The CMMC-AB recently signed a no-cost contract containing a new statement of work that defines its relationship with the Pentagon.
The new statement of work reflects much of what was in the AB’s first memorandum of understanding. Having a contract that carries more legal weight than an MOU allows the AB to hire more staff and finalize its search for a CEO.