Michael Duffey, nominee for under secretary of defense for acquisition and sustainment, weighed in on the future of the Pentagon's Cybersecurity Maturity Model Certification program ahead of his recent Senate Armed Services Committee confirmation hearing. Duffey was asked, as part of the advance policy questions from the committee, whether he would make or recommend changes to CMMC that go “beyond those already mandated by the Deputy Secretary, including CMMC 2.0.” “I recognize the critical importance of ensuring that contractual requirements...