CMMC RESOURCES

DoD contractors are now well aware of the cybersecurity mandates impacting the defense industry. In 2015, the U.S. Department of Defense published the Defense Acquisition Federal Regulation Supplement (DFARS), requiring private DoD contractors to follow the NIST SP 800-171 cybersecurity framework. This aims to protect the U.S. defense supply chain from cyber threats.

Since DFARS, over 300,000 contractors have been working to understand and implement these standards. Some have used internal resources, while others have outsourced to CMMC Registered Provider Organizations (CMMC RPOs) like Anchor Cyber. Despite incentives making compliance a "competitive advantage" in contract awards, many contractors have delayed compliance, with some falsely claiming compliance.

Due to slow adoption of DFARS 252.204-7012, the DoD introduced the Cybersecurity Maturity Model Certification (CMMC) to ensure adequate cybersecurity controls for protecting controlled unclassified information (CUI). Version 1.0 of CMMC was released in January 2020, and version 2.0 was released in November 2021.