Procurement group urges CMMC accreditation body to rescind process guide until rulemaking is complete

The release of the Cyber Accreditation Body’s CMMC assessment process guide is “premature” and could substantially increase costs for organizations seeking assessment, according to a large procurement association, which argues that it should be rescinded until the Defense Department completes its rulemaking process.

The Cyber AB put out the first version of the guide, known “the CAP,” in July for public comment. The document breaks the assessment for the Cybersecurity Maturity Model Certification program down into four phases: preparation, conducting...