The General Services Administration will allow civilian federal agencies to decide whether to include requirements from the Pentagon's cyber certification program in individual contracts that utilize GSA offerings for facilitating their information technology purchases. GSA included language for DOD's Cybersecurity Maturity Model Certification program in its new STARS III and Polaris solicitations, with an intent to give agencies flexibility, GSA's Keith Nakasone said Wednesday at a CMMC conference hosted by FCW . "CMMC will be in scope, but requirements will...