Small business owners have warned the House Committee on Small Business that uncertainty over the costs and timeline of the CMMC could push them out of the defense industrial base. One representative complained that DoD has communicated about the program primarily through social media such as LinkedIn, rather than contacting them directly.
Jonathan Williams of PilieroMazza argued that much of the problem could be addressed by making prime contractors responsible for compliance beyond Level 1, which amounts to basic cyber hygiene. He also suggested CMMC certifying organizations be required to “fast-track” small business applications in line for a contract award.
Sources:
- Federal Computer Week: Small Businesses Ask Congress to Focus CMMC on Primes and DOD
- FedScoop: CMMC Uncertainty Threatens Small Contractors, Business Leaders Warn