ITI: Final CMMC Rule Will Boost U.S. Security and Efficiency
WASHINGTON – Today, global tech trade association ITI welcomed the U.S. Department of Defense’s (DoD) final rule on implementing the Cybersecurity Maturity Model Certification (CMMC) program in DoD contracts. The final rule incorporates much of the tech industry’s feedback, including previous recommendations ITI has proposed.
“ITI supports efforts to strengthen the cybersecurity posture across the Defense Industrial Base. We appreciate DoD’s commitment to addressing stakeholder feedback and the recommendations that it received as part of the previous public comment periods,” said ITI Executive Vice President of Public Sector Policy Gordon Bitko. “Regulatory reciprocity is not just a policy preference; it is a strategic necessity for advancing both security and efficiency across the federal cyber landscape. The decision to eliminate the duplicative incident reporting requirement prevents further fragmentation of the regulatory landscape. We encourage DoD to leverage industry’s expertise and continue making progress on harmonization efforts, including securing mutual recognition of CMMC certifications across federal regimes.”
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
