Alan Chvotkin, executive vice president and counsel at the Professional Services Council, said small businesses would need to comply with a new cybersecurity standard for approval to work on Department of Defense contracts, FCW reported Tuesday.
The department now wants prime defense contractors to guide small businesses in adopting the Cybersecurity Maturity Model Certification standards by January. DoD is aware of cost-related issues faced by small businesses as the department rolls out the new standard, and calls for large firms to help address this matter as mentors.
Ellen Lord, the department’s acquisition chief and 2019 Wash100 Award recipient, said she envisions a collaboration between large firms, industry associations and the federal government to help smaller companies comply with CMMC standards.
CMMC’s final framework would launch in January, and DoD may implement the new standard across contracts and solicitations by July.
