Why the Pentagons Cybersecurity Certification Program Inspires Hope and Fear

Published: May 19, 2020, 10 a.m.

Before the end of the year, the Defense Department intends to finalize a rule change that will require any contractor it engages with to have obtained a certification of its cybersecurity practices from an approved external auditor. The program\u2014known as Cybersecurity Maturity Model Certification\u2014looks to eventually cover 300,000 contractors and subcontractors, many of which are anxiously waiting for the costs and details. Nextgov\u2019s Mariam Baksh dives into the issue with DOD\u2019s Katie Arrington, CEO of the Professional Services Council David Berteau, senior vice president of policy for the Information Technology Industry Council Gordon Bitko and principal director of strategic programs at the National Defense Industrial Association Corbin Evans.