Pentagon’s contract with the CMMC accreditation body outlines spinoff unit for assessor training, performance objectives

The independent accreditation body behind the Pentagon’s cyber certification program will be required to separate its assessor and training programs into business units, one of the many conditions in a no-cost contract signed by the Defense Department and the new non-profit reviewed by Inside Cybersecurity.

“The Department of Defense (DoD) will use the Cybersecurity Maturity Model Certification --Accreditation Body, Inc. (CMMC-AB), a non-profit organization, as the authoritative source to accredit CMMC Third Party Assessment Organizations (C3PAOs) and the CMMC Assessors...