The Defense Department's acquisition office has released its much-anticipated latest draft of a cybersecurity certification program for contractors, focusing on the most basic security controls while work continues on requirements for securing the most critical data and systems from "advanced persistent threats." "DOD is releasing this latest version so that the public can review the draft model and begin to prepare for the eventual [Cybersecurity Maturity Model Certification] roll out," says draft version 0.6 of the CMMC program issued today...
