The U.S. Department of War this month suspended cybersecurity certification requirements that had been set for November, saying they would burden the small- and medium-sized subcontractors that perform much of the nation’s defense manufacturing. “Robust cybersecurity and operational resilience remain critical to protecting American innovation and supporting warfighter readiness. We believe the (defense industrial base) can achieve both, while we reduce unnecessary government red tape,” said DoW Chief Information Officer Kirsten A. Davies. The DoW suspended Phase II of the Cybersecurity Maturity Model Certification (CMMC) program, rules that would have mandated certifications of readiness for any contractor or subcontractor working with sensitive military data. Phase I requirements for self-certification remain in place. Register NowThe DoW has launched a 60-day review of the entire CMMC program in hopes of balancing cybersecurity needs with the ability of subcontractors to be able to afford to participate in defense programs. The Department is soliciting comments from manufacturers and other interested parties as it assesses the proposed requirements. Click here to send your comments to regulators. “The CIO's decision ensures we maintain a strict security baseline while removing paralyzing costs and keeping innovators and competition growing in the defense supply chain,” said Michael Duffey, undersecretary of War for Acquisition and Sustainment. While the Trump administration suspended the upcoming requirements, concerns over the defense supply chain’s ability to meet these standards go back to the Biden administration. In early 2024, a Small Business Administration advocacy unit wrote a letter of concern to the Department of Defense about the CMMC’s potential impact on small businesses. Further reading: Farnborough International Airshow Order Round-UpEuropean Defense Companies Sign Letter of Intent To Establish the Bliksem EXO ConsortiumIACMI Announces Major Expansion of Workforce Development Programs
The U.S. Department of War this month suspended cybersecurity certification requirements that had been set for November.
Subscribe to Newsletters
Get the latest news from IMTS delivered to your inbox.