CIO

DoD CMMC Cyber Standard Released Today

Michael King

31 Jan 2020 — 2 min read

CMMC-logo

The Department of Defense Cybersecurity Maturity Model Certification (CMMC) was released today (Version 1.0), and is available on DoD's OSD website here.

This is a cyber security standard, with 5 maturity levels, created in partnership between the SEI Institute and the DoD.

The DoD has announced that future RFIs and RFPs, will require that prime contractors and subcontractors/vendors, will need to be externally appraised (audited and certified) at a certain CMMC level to be able to bid on DoD contracts.

They are planning on 'tagging' a handful of RFIs in the June 2020 timeframe and a handful of RFPs in the Fall 2020 timeframe with the CMMC requirement, and then phasing in the requirement across DoD contracts over the next 5 years. DoD has said that no existing contracts will get CMMC added to it -- instead DoD will add CMMC to contracts as they come up for re-compete.

This morning, Ellen M. Lord, undersecretary of defense for acquisition and sustainment; Kevin Fahey, assistant secretary of defense for acquisition; and Katie Arrington, special assistant to the assistant secretary of defense for acquisition for cyber, conduct a news conference on cyber security standards for government acquisition at the Pentagon. The video is available online here. The 3 slides presented are shown below.

Reduce Chaos with an Organizational Playbook

The Chaos of Tribal Knowledge and Ambiguous Authority Small organizations often run off of "tribal knowledge." Everyone just knows how things are done because they sit in the same room (or Slack channel) and figure it out on the fly. There's a classic approach of "

The AI Automation Trap: Strategy and Systems must Outpace AI Innovation

The Trap Business leaders are currently navigating a storm of AI headlines. The pressure to transform, to automate before being left behind, is immense. I see this in the companies I support as a board member and advisor. They feel the FOMO, but they struggle to make wise bets in

Distill Your Strategy until it actually Says Something

I recently listed to a great podcast interview about Alpha School, on the Invest Like the Best with Patrick O'Shaughnessy podcast, which is a new education model focused on using AI to personalize education to each student. It was recommended by a friend of mine, and was a

Reorienting my Personal Goal Setting Approach

In past years, I've done personal and professional strategic planning and goal setting with a focus on goals first at a high level based around desires like Connection (Relationship), Purpose, Impact, and Service, and created goals under those headers. This year, instead, I reflected on what I wanted

Read more

Reduce Chaos with an Organizational Playbook

The AI Automation Trap: Strategy and Systems must Outpace AI Innovation

Distill Your Strategy until it actually Says Something

Reorienting my Personal Goal Setting Approach