CMMC assessors see momentum to get official certifications underway while rulemaking uncertainty continues

CMMC assessment organizations are waiting on several details to fall into place so they can start conducting official assessments for companies that want to compete for defense contracts, but stakeholders say uncertainty over rulemaking timing is not impacting demand from companies wanting to be early adopters.

The Pentagon is working on two rulemakings to implement changes from Version 2.0 of its Cybersecurity Maturity Model Certification program. Two interim final rules are expected by May 2023 and CMMC requirements will...