Pentagon considers using cloud service offerings to help contractors reach CMMC compliance

By Sara Friedman / April 21, 2022 at 10:40 AM
The Defense Department is in the early stages of determining whether it can work with industry partners to develop cloud service offerings that can help contractors meet Cybersecurity Maturity Model Certification requirements, according to Pentagon cyber chief David McKeown. The Pentagon’s CMMC program is focused on the handling of controlled unclassified information held by defense contractors. At CMMC level two, contractors must meet all of the 110 controls in NIST Special Publication 800-171 to achieve a certification. “In the CMMC...

Not a subscriber? Sign up for 30 days free access to exclusive, behind-the-scenes reporting on defense policy and procurement.

Log in to access this content.