The Aerospace Industries Association is asking the Defense Department to provide information on how it will address flow-down requirements and the roles and responsibilities for primes and subcontractors, in response to the first proposed rule for the Pentagon's Cybersecurity Maturity Model Certification program. “Clarification is needed on DOD’s intent with regard to prime contractors ‘requir[ing] subcontractor compliance throughout the supply chain at all tiers with the appropriate CMMC level for each subcontractor....’ We request clarification on what is meant by...
