The Cybersecurity Maturity Model Certification program is moving from the Pentagon's acquisition arm to direct oversight by Defense Department Chief Information Officer John Sherman, according to a memorandum obtained by Inside Cybersecurity . “Effective immediately, the Chief Information Security Office in the Office of the Under Secretary of Defense for Acquisition and Sustainment (USD(A&S)) and the position of Chief Information Security Officer established pursuant to the Assistant Secretary of Defense for Acquisition memorandum, ‘Establishment of the Chief Information Security Office,’...