Reforming CMMC and Reducing Compliance Burden for the Defense Industrial Base (DIB)

The Department of War (DoW) is seeking input from the Defense Industrial Base (DIB) on practical strategies to inform the newly established CMMC Reform Task Force. The task force aims to reduce compliance costs and administrative burdens associated with the Cybersecurity Maturity Model Certification (CMMC) Phase II requirements. The DoW is soliciting feedback on protecting federal data, uplifting operational resilience against cyber-attacks, and streamlining cybersecurity compliance. Key areas of focus include: • Utilizing existing commercial cybersecurity capabilities • Leveraging and optimizing self-attestation capabilities • Streamlining cybersecurity compliance requirements • Reducing compliance costs and administrative burdens for small, medium, and non-traditional businesses • Improving operational resilience against cyber-attacks The DoW intends to use the feedback to inform policy reforms and recommendations for the CMMC program.