Off the Shelf

CMMC: What does it mean for government contractors?

Tom Voshell, vice president, Federal Program Office at Coupa Software, joins host Roger Waldron on this week's Off the Shelf to discuss data management and cybe...

July 18, 2023 8:11 pm

< a min read

This week on Off the Shelf, Tom Voshell, vice president, Federal Program Office at Coupa Software provides his insights and analysis regarding data management and cyber security with a focus on the Department of Defense’s upcoming release and implementation of an updated version of its Cybersecurity Maturity Model Certification (CMMC 2.0).

Tom Voshell, vice president, Federal Program Office, Coupa Software

Voshell discusses the underlying DFARs provisions and NIST 800-171 standard and controlled unclassified information (CUI). He lays out the process, applicability and management considerations for contractors and subcontractors who will be subject to CMMC.

Voshell also gives his thoughts on the new software attestation form, the recently released DHS cybersecurity regulations, and FedRAMP.