Defense IT agency to develop ‘scoring rubric’ for decisions on CMMC levels in contracts

An agency tasked with providing IT services and support across the Defense Department is working on a “scoring rubric” to help its acquisition officials make decisions internally on contracting requirements related to the Pentagon’s new cyber certification program.

An interim rule establishing DOD’s Cybersecurity Maturity Model Certification program went into effect on Monday. The program has five levels based on the sensitivity of information that contractors are holding on their systems.

“The biggest change for me personally is when I...