CMMC ecosystem prepares for rulemaking release, while exact timing remains uncertain

Stakeholders are getting ready for the upcoming release of a long-awaited rulemaking to implement the Pentagon’s Cybersecurity Maturity Model Certification program, while the exact timing and content of the rule remains unclear two years after the Defense Department announced a major revamp.

“The CMMC train is gaining steam,” Cyber Accreditation Body CEO Matthew Travis said at the second annual CMMC Ecosystem Summit. Travis said the train is currently “at the station,” emphasizing to stakeholders that “it’s not too late...