First CMMC assessment organization encourages defense contractors to rethink approach for holding sensitive information

Defense Department contractors should focus on how they handle controlled unclassified information when preparing to undergo an assessment on their capabilities to meet requirements under the Pentagon’s cyber certification program, according to the first CMMC assessment organization authorized to conduct audits.

Redspin, a division of cyber consulting firm CynergisTek, is the first fully authorized certified third party assessment organization approved under DOD’s Cybersecurity Maturity Model Certification program.

CynergisTek CEO Caleb Barlow spoke with Inside Cybersecurity about his company’s process...