The General Services Administration wants to ensure government-wide contracts have cybersecurity requirements baked in from the start.
A lot of vendors think the CMMC requirements are pretty onerous. Congress asked DoD to prove the Pentagon is meeting the same cybersecurity standards it's demanding from contractors.
As part of the Cybersecurity Maturity Model Certification exercise, DoD will figure out which data under Level 2 will require self-assessments and which will require third-party assessments.
The National Institute of Standards and Technology has established a special guide to protecting CUI. Federal Drive with Tom Temin talked to the acting manager of NIST's security, engineering and risk management group, Vicki Pillitteri, to find out what every data owner needs to know.
In today's Federal Newscast, President Biden designated the Department of Homeland Security as the lead agency for the federal response to the Russia-Ukraine crisis.
The CMMC AB is gearing up for voluntary assessments and is also looking to recruit more cybersecurity assessors, but the timeline for CMMC remains as unclear as ever.
In today's Federal Newscast, the Homeland Security and Governmental Affairs Committee is set to consider a bill combining incident reporting requirements and updated federal cyber standards.
DoD is rolling back an aspect of the plan that would have allowed some 40,000 companies to self-attest to their cybersecurity practices.
The continuing resolution, having now eaten up nearly five months of the fiscal year, is starting to affect the market valuations of publicly traded federal contractors. That may not seem like a concern of the government, but think again.
In today's Federal Newscast, a report for the Defense Department Inspector General says providing shots on bases were particularly important since they were less available in civilian facilities overseas.
Former leader of DoD's CMMC program alleges her security clearance suspension and later elimination of her position were "politically influenced."
The Cybersecurity Maturity Model Certification program is moving to the CIO's office, while Katie Arrington's former role is being disestablished.
Katie Arrington, the former top cyber official in DoD’s office of acquisition and sustainment, gained new information as part of a lawsuit, her attorney said.
Jason Miller, executive editor of the Federal News Network, provides a wrap up of the key procurement developments in 2021 and takes a sneak peak at what's ahead in 2022.
For the past several months, there has been a frantic scrambling by all stakeholders involved in the Cybersecurity Maturity Model Certification program to determine the best path forward to secure the nation’s supply chain.