CMMC: What’s In Scope for Assessment?

DoD has indicated they would like to publish their CMMC Interim Rule in May ’23, although some recent commentary indicates the government may publish a draft rule for comment. While specific timing may be in flux, CMMC requirements will eventually begin appearing in DoD solicitations and contracts, so it’s important for companies to understand what assessors will evaluate. Alex Major, Partner, McCarter & English, Amira Armond, President, Kieri Solutions, Stuart Itkin, Vice President, CMMC & FEDRAMP Assurance, Coalfire Federal, and Vince Scott, CEO and Founder, Defense Cybersecurity Group provide their insights on good scoping and bad scoping, to include examples. The webinar highlights NDIA’s concerns and make recommendations for more effective implementation.