Defense industry survey finds lack of compliance with current Pentagon cyber standard

Defense contractors are having trouble complying with current cyber standards put in place in 2017, according to a recent industry survey, which puts a spotlight on the defense industrial base preparedness for the Cybersecurity Maturity Model Certification program.

The Defense Department made changes in 2017 to its acquisition rules requiring contractors to self-certify compliance with the 110 controls in NIST Special Publication 800-171, and followed up with an acquisition requirement in 2020 to submit a compliance score into the Pentagon’s...