The Pentagon's four-phase timeline for incorporating cyber certification requirements into contract solicitations kicked off recently, with a final rulemaking amending defense acquisition rules officially going into effect. The Cybersecurity Maturity Model Certification program has faced a winding road with initial work starting in 2019 to develop the requirements for each level and stand up an independent accreditation body. A 2021 internal review of the program under the Biden administration led to changes and work to craft new rules. The first...
