Cybersecurity, Privacy, & AI

Trending Now

Your 30 Days Has Become 30 Hours: AI Is Reshaping Federal Cyber Defense • AI in Hiring: Evolving Legal Risks Under State and Federal Law • Authorized by the User, Blocked by the Platform: Testing the Legal Limits of AI Agents • Recent GenAI Class Actions Build on Early Successes and Break New Ground • Why AI Is Forcing Privacy and Security Teams Back Together — and What That Means for Your Organization

Published on January 25, 2021 • Cyber

CMMC Contract Terms Expand Beyond Defense to Homeland Security

G-Tech Studios | Shutterstock

Compliance with the Cybersecurity Maturity Model Certification program will soon be required for Department of Defense contracts, but officials are also looking into also incorporating its terms into contracts offered by the Department of Homeland Security. Katie Arrington, CISO for Defense acquisitions, says that implementation of audits for the first CMMC contracts was intentionally delayed for the incoming Biden Administration to review. Arrington has promised that at least one additional federal civilian agency will adopt CMMC requirements in 2021, and GSA has already mentioned the requirements in two government-wide contracts. Arrington’s long-term goal is to implement the terms government-wide.

Source:

NextGov: DOD’s Cybersecurity Certification Requirements to Appear in DHS Contracts

Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.