Defense group raises concerns over cost of CMMC implementation as companies prepare for assessments

The National Defense Industrial Association argues implementing the Pentagon’s Cybersecurity Maturity Model Certification program will put a significant cost on companies that could be a barrier to entry for industry partners, as part of an annual report taking the pulse of defense firms.

“After several years and multiple iterations of rulemaking, the Department released the final rule for the CMMC program on October 15, 2024, which became effective on December 16, 2024. As the defense industry moves forward with implementation...