The Pentagon's final rule to implement the Cybersecurity Maturity Model Certification program addresses concerns from cloud service providers and managed service providers over how they can be used to help companies reach compliance with the Defense Department effort. The final rule uses the term “external service provider” to provide a broad view of the landscape for platforms that take some of the burden off companies seeking a CMMC assessment. The rulemaking contains an analysis of comments received from the Dec...
