A new industry advisory council for the Pentagon’s Cybersecurity Maturity Model Certification program is determining “rules of the road” for its work and “scope” of operations, according to council chair Yong-Gon Chon, who says early efforts have focused on evaluating “practice effectiveness” for controls in the CMMC model and examining small business issues. The CMMC Accreditation Body announced the creation of the Industry Advisory Council in April. The IAC includes representatives from the technology sector, large prime contractors and small...