A defense industry leader says the Defense Industrial Base Sector Coordinating Council's recent exercise on the Pentagon's Cybersecurity Maturity Model Certification program shows more work is necessary to determine how the department will classify controlled unclassified information and the required maturity level needed for defense suppliers in contracts.