DOD clarifies use of external service providers to assist with CMMC assessments

By Sara Friedman / October 16, 2024 at 10:45 AM
The Pentagon's final rule to implement the Cybersecurity Maturity Model Certification program addresses concerns from cloud service providers and managed service providers over how they can be used to help companies reach compliance with the Defense Department effort. The final rule uses the term “external service provider” to provide a broad view of the landscape for platforms that take some of the burden off companies seeking a CMMC assessment. The rulemaking contains an analysis of comments received from the Dec...

Not a subscriber? Sign up for 30 days free access to exclusive, behind-the-scenes reporting on defense policy and procurement.

Log in to access this content.