The accreditation body (AB) for the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program is authorized to offer cybersecurity services and Mark Berman, chairman of the communications committee within the body’s board of directors, said the AB is also tasked with helping certified vendors in the defense supply chain improve their cybersecurity posture, Nextgov reported Monday.
“A continuous monitoring capability could provide benefits to organizations in the defense supply chain by increasing their awareness of changes to their current cybersecurity posture,” Berman said. “This initiative is a potential avenue where we can provide value add to enhance and maintain the security posture.”
He noted that classifying the accreditation body as a monitoring or training institution “does not capture the full breadth of our mission which includes the development, maintenance, validation, protection of the CMMC Standard and using it to accredit entities, provide research, training, assessments, measurements, testing and more.”
Berman said the body wants to employ tools that could allow companies that have completed a CMMC assessment to increase their cyber awareness.
