Defense and tech groups ask DOD to provide clarity over CMMC accreditation body responsibilities

The defense and tech industries want additional guardrails included in the Pentagon’s acquisition rules on the role, responsibilities and purpose of the Cybersecurity Maturity Model Certification Accreditation Body, an independent entity that is taking a foundational role in the certification of assessors and consultants for the new program.

An interim rule establishing DOD’s CMMC program and setting up new requirements for defense contractors under National Institute of Standards and Technology Special Publication 800-171 went into effect on Monday.

The National...