Code of conduct for certified CMMC assessors outlines confidentiality measures, IP protections

By Sara Friedman / December 1, 2020 at 11:14 AM
The accreditation body behind the Pentagon's cyber certification program is requiring assessors and consultants to sign a "Code of Professional Conduct," which details confidentiality protections and the "proper use" of information collected from contractors. "The Code of Professional Conduct (CoPC) sets expectations for those [Cybersecurity Maturity Model Certification]-AB credentialed individuals and accredited entities that are authorized to deliver CMMC services under license from the CMMC Accreditation Body," the document produced by the CMMC AB states. The CoPC "also sets expectations...

Not a subscriber? Sign up for 30 days free access to exclusive, behind-the-scenes reporting on defense policy and procurement.

Log in to access this content.