Defense group sees potential ‘bottlenecks’ for CMMC assessments, issues around CUI as rulemaking process moves forward

The National Defense Industrial Association is concerned over the Defense Department’s ability to have enough capacity for the demand in assessments once the Cybersecurity Maturity Model Certification program gets up and running following the conclusion of the rulemaking process.

The Pentagon is in the process of finalizing two rulemakings that are needed to officially launch the CMMC program with the first making changes to Title 32 of the Code of Federal Regulations and a second amending Title 48 of the...