With implementation of CMMC 2.0 possibly years away, Defense Department officials are considering financial rewards and other incentives to get contractors to improve their network defenses in the meantime, according to Stacy Bostjanick, director of CMMC policy within the office of the under secretary of acquisition and sustainment. She said that companies who demonstrate their level of cybersecurity – such as those who have already been assessed by CMMC Third Party Assessment Organizations – might have their contract proposal evaluated more favorably, or might be awarded a higher profit margin.
Source:
- Federal News Network: Pentagon Considers Incentives to Get Companies to CMMC 2.0 Early