Wirestock Creators | Shutterstock

Small business owners have warned the House Committee on Small Business that uncertainty over the costs and timeline of the CMMC could push them out of the defense industrial base. One representative complained that DoD has communicated about the program primarily through social media such as LinkedIn, rather than contacting them directly.

Jonathan Williams of PilieroMazza argued that much of the problem could be addressed by making prime contractors responsible for compliance beyond Level 1, which amounts to basic cyber hygiene. He also suggested CMMC certifying organizations be required to “fast-track” small business applications in line for a contract award.

Sources: