Over the past few weeks, much of the conversation surrounding CMMC has been driven by headlines following the Department of War’s decision to suspend Phase II implementation while the program is reviewed. Predictably, social media has been filled with speculation ranging from “CMMC is dead” to “everything has changed.” This week’s CyberAB Town Hall painted[…]
The Department of War recently announced that it is suspending the implementation of CMMC Phase II requirements while it conducts a review of the program. The announcement has generated considerable discussion across the Defense Industrial Base (DIB), with many organizations asking a simple question: “Does this mean CMMC is over?” The short answer is no. While[…]
Introduction When most business leaders think about cybersecurity risk, they think about hackers, ransomware attacks, or data breaches. The Department of Justice is increasingly focused on something else: whether companies are actually doing what they say they’re doing. Last week, Alabama-based defense contractor LOGZONE agreed to pay more than $500,000 to settle allegations that it[…]
CMMC has officially moved from “that thing we’ll deal with eventually” to “that thing in your current contract.” The urgency is real, and the stakes are high. Lately, our clients all ask some version of the same question: “If we do all the work, are we actually going to pass?” Usually, you’d expect a straight[…]
Ask five consultants how long CMMC Level 2 certification takes and you’ll get five versions of “it depends.” That’s not wrong, but it’s not useful either. The truth is that timelines follow predictable patterns based on where an organization starts. This article lays out realistic timeframes for mid-size defense contractors (50-250 employees) pursuing Level 2[…]