Internet Security Alliance: CMMC fails to account for the economics of small-business cybersecurity

The Pentagon’s Cybersecurity Maturity Model Certification program will fall short in securing the Defense Industrial Base because it fails to address underlying economic realities that limit how much small and mid-sized businesses can invest in cyber, according to the industry-based Internet Security Alliance.

“However, it is sadly predictable that the CMMC, however much an improvement, is destined to disappoint for the exact same reasons the preceding strategies disappointed. Small- and medium-sized companies simply cannot afford a sufficiently robust cyber infrastructure...