Federal News Network – The Cybersecurity Maturity Model Certification program has been long in gestation. But this baby is going to be a big one. That’s what happens when the Defense Department wants all of its contractors to do something. Attorney Eric Crusius, a partner at Holland and Knight, joined the Federal Drive with Tom Temin to discuss more.
While DoD has been at the forefront in pushing the CMMC program, civilian agencies are starting to embrace it with their spin. Don’t expect any changes in a new Administration. Indeed, the CMMC program started under the Trump administration. Now is the time to invest, while costs can be scaled and managed, rather than trying to implement needed changes in response to an immediate solicitation requirement. It’s much more expensive to make these changes in a short timeframe.