The Defense Department is preparing listening sessions as it reviews the Cybersecurity Maturity Model Certification, or CMMC, program. Pentagon officials have signaled they want to move quickly, even as major questions remain about how the certification effort could change.
According to the latest update, the review could result in a wide range of outcomes. DoD Chief Information Officer Kirsten Davies said after the review team’s first meeting that the process could lead to anything from minor adjustments to a broader overhaul.
That uncertainty is keeping attention on what defense officials may do differently this time around. The CMMC program has been closely watched because it affects how contractors demonstrate cybersecurity protections when working with the Defense Department.
The planned listening sessions suggest the Pentagon is looking for feedback as it considers its next steps. For companies that do business with DoD, the review is an important signal that the future structure of CMMC is still taking shape.
