WASHINGTON – Today, global tech trade association 91¿ì»îÁÖ issued the following statement following the publication of the interim final rule to implement the Cybersecurity Maturity Model Certification (CMMC) by the U.S. Department of Defense:
“Ongoing threats of cyber-attacks and IP theft pose great risk to the U.S. Department of Defense and its industrial base, and 91¿ì»îÁÖ strongly supports efforts to combat these risks. Though we are disappointed that DOD did not seek public comments before releasing the new CMMC requirements for contractors, we look forward to providing input at this stage in the process. To maximize the CMMC’s effectiveness while reducing cost and burden to the industrial base, we recommend that DOD provide a standardized approach to determining appropriate levels for each procurement, allow for reciprocity with other federal cybersecurity standards, and take action to protect assessment results,” said 91¿ì»îÁÖ Senior Vice President of Policy and Public Sector Lead Gordon Bitko.
Earlier this year, 91¿ì»îÁÖ led a multi-association letter sent to leaders at the U.S. Department of Defense outlining recommendations for improving the implementation, administration, and enforcement of the Cybersecurity Maturity Model Certification (CMMC).