The Small Business Administration's advocacy office is urging the Defense Department to subject its draft cybersecurity certification program to a formal notice-and-comment rulemaking process, warning the complexity and costs of the plan could undermine the Pentagon's contracting goals. "Currently DOD recognizes that the implementation of this model may require the agency to permit contractors to charge parts of their cyber development as allowable costs," writes the SBA's Office of Advocacy in comments submitted to DOD on its draft Cybersecurity Maturity...
