Ellen Lord, undersecretary of defense for acquisition and sustainment and a 2020 Wash100 Award winner, said the Department of Defense will conduct a public hearing on the new cybersecurity standards in late April or early May with plans to start the first Cybersecurity Maturity Model Certification training course for third-party auditors in April, National Defense reported Wednesday.
“Now that CMMC is released, we’re really focusing on the remaining timeline, selecting third-party vendors to do the auditing, creating CMMC training material, rulemaking … and completing an agreement with the newly established CMMC accreditation body,” Lord said Wednesday at the annual McAleese & Associates defense programs conference in Washington, D.C.
She noted that the Pentagon plans to update the Defense Federal Acquisition Regulation Supplement 252.204.7012 by October as part of the CMMC implementation and is in talks with industry on whether to require each contractor in the defense industrial base to seek CMMC certification from third-party assessors.
Katie Arrington, chief information security officer at the Office of the Assistant Secretary of Defense for Acquisition and a 2020 Wash100 Award recipient, will serve as a keynote speaker at the CMMC Forum 2020. She will address the CMMC’s timeline, how the certification process could change and will provide a memorandum of understanding with a newly established CMMC accrediting body.
A full expert panel will include Ty Schieber, senior director of executive education and CMMC-AB chairman of the University of Virginia and Richard Naylor of the Defense Counterintelligence and Security Agency (DCSA) among other members of the federal sector and industry.
Register here to join Potomac Officers Club for its CMMC Forum 2020 on April 2nd to learn about the impact DoD’s CMMC will have on cybersecurity practices, supply chain security and other aspects of the federal market.