Defense policy bill clears Senate panel with cyber provisions on CMMC and ‘zero trust’

The fiscal 2025 National Defense Authorization passed by the Senate Armed Services Committee includes provisions requiring an assessment of the Pentagon’s Cybersecurity Maturity Model Certification program, guidance on how a “zero trust” strategy applies to the Internet of Military Things hardware, and on collaboration with industry and international allies.

The committee approved the $923 billion bill on June 13 by a 22-3 vote, although Chairman Jack Reed (D-RI) voted against it because of concerns about its approach to funding increases...