Defense industry groups question Pentagon's new cyber certification rules

Three of the largest defense industry associations are raising questions about the Pentagon's new cybersecurity certification, including concerns about the "aggressive" implementation time line and the lack of clarity on how the protections will be applied across different programs and suppliers.

The Professional Services Council, the National Defense Industrial Association and the Aerospace Industries Association all provided feedback to the Defense Department last week on a draft version of the Cybersecurity Maturity Model Certification or CMMC. DOD released the...