Pentagon cyber leader: CMMC policies on closing assessment gaps, incentives in process as rulemakings develop

The two rulemakings to implement the Defense Department’s Cybersecurity Maturity Model Certification program are a work in progress, according to DOD cyber chief David McKeown, who says the Pentagon is continuing to develop its policies in areas such as incentives and how contractors will be allowed to fill gaps.

The Defense Department expects the rulemaking process “to take from 15 to 24 months,” McKeown said in an interview with Inside Cybersecurity. It involves changes to the existing interim final rule,...