CMMC & Cybersecurity Blog

Practical guidance on CMMC compliance, NIST 800-171, CUI handling, and DoD cybersecurity — written by assessors who do this every day.

Statement from the CYBER AB about the suspension of CMMC Phase II

The CYBER AB responded to the Department of War’s decision to suspend CMMC Phase ll implementation requirements while a newly established CMMC…

L3Harris Issues CMMC Requirement for Suppliers

L3Harris Technologies notified suppliers of CMMC requirements tied to DoD contracts. Suppliers handling CUI may be required to obtain CMMC Level 2…

Lockheed Martin: Suppliers Must Maintain CMMC Status in SPRS and Exostar

In a supplier notice titled “Maintaining Cybersecurity Maturity Model Certification Status,” Lockheed Martin directed active suppliers to document their CMMC status in…

GSA Blog: Cybersecurity Maturity Model Certification (CMMC)

The GSA Blog published a comprehensive guide on CMMC — covering the certification levels, requirements, and how to prepare. The CMMC sets…

Elbit Systems of America Supplier Advisory (CMMC Level 2)

Elbit Systems of America shared an important supplier notice regarding CMMC Level 2 certification. If your organization may be impacted, Cybersec Investments…

Elbit Systems Urges Suppliers to Act on CMMC Level 2 Compliance

Elbit Systems of America informed suppliers that CMMC compliance is now mandatory. Level 2 certification from a C3PAO is required to continue…

Lockheed Martin: Suppliers Must Update CMMC Status in Exostar

Lockheed Martin required all active suppliers to submit their CMMC status via a Cybersecurity Compliance Attestation (CCA) in Exostar. Suppliers handling sensitive…

Department of Defense Finalizes CMMC Rule, Making Certification Mandatory for New Contracts

The DoD officially published the final rule for CMMC under 48 CFR, integrating it into federal acquisition regulations. CMMC certification is now…

Elbit Systems of America Issues Supplier Cybersecurity Notice

Elbit America released an important communication to its supplier community: if business requirements necessitate sharing CUI with a supplier, that supplier will…