Last week, DOD announced the release of CMMC Version 1.0. CMMC Version 1.0 is a comprehensive certification process featuring 171 cybersecurity best practices to ensure that contractors secure their information systems. The question on everyone’s mind is who is going to pay for the certification and all of the work necessary to comply.

DOD

On January 30, 2020 the Department of Defense released the Cybersecurity Maturity Model Certification (CMMC). The Department of Defense (DOD) Office of the Undersecretary of Defense for Acquisition and Sustainment developed the CMMC in response to concerns that contractors were not adequately protecting sensitive federal information, known as Controlled Unclassified Information (CUI). Although DOD has