ITI Shares New Recommendations on DoD’s CMMC Program
WASHINGTON – Today, global tech trade association ITI continued its longstanding engagement on the U.S. Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program by submitting new recommendations on DoD’s proposed rulemaking.
ITI’s submission (opens in a new tab) proposes seven areas of opportunities to strengthen the Department’s rule and ensure the CMMC program protects national security and enables a secure, resilient defense industrial base.
“We’re pleased that DoD continues to listen to the industry’s implementation concerns,” said ITI Senior Manager of Public Sector Policy Leopold Wildenauer. “Over the past few years, DoD has continuously partnered with the Defense Industrial Base to advance the program and strengthen its implementation in DoD contracts. We encourage the Department to continue this path by addressing remaining concerns with the incident reporting requirements harmonization and the enforcement of waivers.”
ITI also called for harmonization of CMMC requirements with existing regulations and procedural clarifications of the requirement flow down to subcontractors. You can read ITI’s full comments here (opens in a new tab).
Read ITI’s previous feedback (opens in a new tab) to DoD on how to further improve the cybersecurity baseline requirements for the defense industrial base.
Related News & Analysis
Why an AI ‘Kill Switch’ isn’t a Catch-all Solution
AI is Supercharging Cyber Threats. Defenders Need New Tools and Partnerships.
