Defense Dept. offers breakdown on how audits will work for CMMC assessment organizations

The Defense Contract Management Agency has briefed assessment organizations that want to conduct audits for contractors looking to obtain a Cybersecurity Maturity Model Certification on preparing for and going through the process to get their own certification.

Certified third party assessment organizations need to get approval from DOD that they meet CMMC level three before they can start working on behalf on contractors looking to compete for DOD contracts. DCMA’s Defense Industrial Base Cybersecurity Assessment Center is conducting the assessments...