Defense ISAC releases ‘shopping guide’ to assist small businesses with selecting assessor for CMMC certification

The National Defense Information Sharing and Analysis Center has published a “shopping guide” to help small and medium-sized businesses pick an assessor who meets their needs to reach compliance with the Pentagon’s Cybersecurity Maturity Model Certification program.

The guide is designed to “address the challenges presented to an SMB when vetting an assessor for Cybersecurity Maturity Model Certification (CMMC),” and was developed by SMBs across the defense industrial base and feedback from CMMC third-party assessment organizations.

“It is important...