MITRE has raised issues with potential costs for contractors who want to do business with the Defense Department in addressing assessment gaps and accommodating for potential future changes in the maturity model for the upcoming Pentagon cyber certification program, in response to a proposed rule to implement the program. “The DOD needs to have a plan to track the status of the [defense industrial base] and be prepared to make quick changes to the program to accommodate unintended outcomes of...
