Some experts think between 1,000 and 2,000 certified assessors will be required to audit the defense contractors who will now be required to get verification of their controls under the new Cybersecurity Maturity Model Certification program. So far, only 50 have been granted provisional status, allowing them to participate in assessments in so-called pathfinder contracts. Estimates of the number of companies that will need assessments range from 250,000 to 300,000. Furthermore, some will require multiple assessments, and what each assessment entails will depend on the company’s preparation, and the level of certification they are seeking.
Cybersecurity, Privacy, & AI
Trending Now
Cyber Leaders Wary of Giving Agentic AI Too Much Authority • TikTok Can Be on Government Phones. Managing It Comes Next. • NIST Wants to Overhaul Its Vulnerability Database for the AI Age • OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns • Cyber-attacks Against State Water Supplies Continue—12 to Date
Will There Be Enough CMMC Assessors to Certify All DoD Contractors?
Billion Photos | Shutterstock
Stay compliant and protected with daily updates on cybersecurity, data privacy, and federal oversight with our Cyber & Privacy newsletter, delivering up-to-the-minute intelligence Monday–Saturday — Subscribe here.