The U.S. Department of Defense has finalized a new rule requiring federal contractors and subcontractors to meet specific cybersecurity standards to qualify for defense contracts. The rule introduces the Cybersecurity Maturity Model Certification (CMMC), a framework designed to ensure contractors comply with protections for federal contract information and controlled unclassified data. The CMMC also aims to safeguard against cybersecurity threats. Most defense contractors must meet these requirements by fiscal year 2026.
On February 5, Adam Austin, cybersecurity lead at Totem Tech, a small U.S. Air Force contractor, will lead a virtual discussion hosted by the Michigan Alliance of APEX Accelerators. The event will focus on helping small businesses navigate the new CMMC requirements. Organizers emphasize that the updated rule will demand robust cybersecurity measures, posing challenges for organizations of all sizes.
During the session, Austin will address the hurdles small businesses may face in achieving compliance and obtaining certification. He will also provide insights into expected costs, timelines, and practical steps for small businesses to begin the certification process. This event aims to equip small contractors with the knowledge needed to meet the Defense Department’s evolving cybersecurity standards.