{"id":222872,"date":"2026-03-12T15:16:00","date_gmt":"2026-03-12T19:16:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/03\/12\/watchdog-urges-dod-to-address-external-factors-affecting-cmmc-implementation\/"},"modified":"2026-03-12T15:16:00","modified_gmt":"2026-03-12T19:16:00","slug":"watchdog-urges-dod-to-address-external-factors-affecting-cmmc-implementation","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/03\/12\/watchdog-urges-dod-to-address-external-factors-affecting-cmmc-implementation\/","title":{"rendered":"Watchdog urges DOD to address external factors affecting CMMC implementation"},"content":{"rendered":"<p><a href=\"https:\/\/defensescoop.com\/2026\/03\/12\/cmmc-implementation-gao-report-kirsten-davies-dod-cio\/\">Watchdog urges DOD to address external factors affecting CMMC implementation<\/a><\/p>\n<p><a href=\"https:\/\/defensescoop.com\/2026\/03\/12\/cmmc-implementation-gao-report-kirsten-davies-dod-cio\/\">https:\/\/defensescoop.com\/2026\/03\/12\/cmmc-implementation-gao-report-kirsten-davies-dod-cio\/<\/a><\/p>\n<p>Publish Date: <a href=\"publish_date]\">2026-03-12 15:16:00<\/a><\/p>\n<p>Source Domain: <a href=\"defensescoop.com\">defensescoop.com<\/a><\/p>\n<p>In response to findings from the Government Accountability Office, a senior Pentagon official said the department plans to evaluate and define outside variables that could hinder the defense industry\u2019s ability to comply with new standards set by the Cybersecurity Maturity Model Certification 2.0 model.<\/p>\n<p>According to a study published by the GAO on Thursday, the Defense Department has done significant work to build a comprehensive strategy for implementing CMMC 2.0 cybersecurity standards. However, the report found that the department has yet to completely identify factors beyond its control that risk the program\u2019s overall success.<\/p>\n<p>\u201cCMMC planning documentation identifies processes that can help address external factors, including a program waiver process,\u201d the report stated. \u201cHowever, CMMC planning documentation does not systematically identify the external factors that could affect reaching each goal.\u201d<\/p>\n<p>After six years of development, the department began officially enforcing the CMMC program in November. The framework requires defense contractors to confirm their networks \u2014 as well as those of their entire supply chain \u2014 have adequate cybersecurity controls to prevent adversaries from accessing sensitive Pentagon data.<\/p>\n<p>CMMC was met with harsh criticism when it was introduced by the first Trump administration, with members of the industrial base claiming the program was overcomplicated and created undue regulatory burdens on companies. A major argument has been that implementing CMMC controls would be cost- and time-prohibitive, especially for small and medium-sized vendors.\u00a0<\/p>\n<p>The Pentagon has worked closely with industry to simplify the framework and provide resources to the industrial base to help with compliance.  <\/p>\n<p>However, while the department has developed multiple planning documents to guide CMMC\u2019s three-year implementation plan, there are issues that haven\u2019t been addressed, the GAO suggested.<\/p>\n<p>\u201cDOD&#8230;<\/p>\n<p><a href=\"https:\/\/defensescoop.com\/2026\/03\/12\/cmmc-implementation-gao-report-kirsten-davies-dod-cio\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Watchdog urges DOD to address external factors affecting CMMC implementation https:\/\/defensescoop.com\/2026\/03\/12\/cmmc-implementation-gao-report-kirsten-davies-dod-cio\/ Publish Date: 2026-03-12 15:16:00&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[],"class_list":["post-222872","post","type-post","status-publish","format-standard","hentry","category-cybersecurity"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/222872"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=222872"}],"version-history":[{"count":0,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/222872\/revisions"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=222872"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=222872"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=222872"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}