1. Home
  2. |Insights
  3. |DoD Previews Final Cybersecurity Maturity Model Certification with Revision 0.7

DoD Previews Final Cybersecurity Maturity Model Certification with Revision 0.7

Client Alert | 1 min read | 12.17.19

The Department of Defense (DoD) recently released another revision to its Cybersecurity Maturity Model Certification (CMMC) that, starting next year, independent auditors will use to certify contractor compliance with DoD cybersecurity requirements. Most notably, Revision 0.7 previews the requirements for cybersecurity maturity Levels 4 and 5. Moving beyond the cyber hygiene requirements of Levels 1 through 3, Levels 4 and 5 require even more robust cybersecurity programs capable of addressing the dynamic threats posed by advanced persistent threats (APTs). These two highest levels of certification also implement the enhanced security requirements documented in NIST SP 800-171B, which remains in draft form.

The DoD is expected to announce the final CMMC in January of next year and begin introducing “go/no-go” certification requirements in solicitations as early as June 2020.


Contacts

Insights

Client Alert | 1 min read | 08.10.26

ASBCA Denies Government Motion to Dismiss, Providing Key Guidance on Contractor Claim Standards Post-ECC International

In Appeal of Bahadir (a C&M case), the Armed Services Board of Contract Appeals denied the government’s motion to dismiss in its entirety, ruling in favor of the contractor on both key issues raised by the government. The case arises from a contract for construction work at Al Udeid Air Base in Qatar, under which Appellant alleged government-caused delay and filed certified prolongation claims using a “windows analysis” methodology. The government moved to dismiss, arguing that Appellant failed to state a sum certain for each of what the government characterized as 38 distinct claims, and separately that four claims had not been properly presented to the Contracting Officer. ...

View All Insights