On May 18, 2020, The CMMC-AB (Cybersecurity Maturity Model - Accreditation Body) released an update on the current state of the CMMC roll out. During the webinar, Katie Arrington, CISO for the Department of Defense (DoD) Acquisition Office, reiterated that this project is still moving forward.While companies currently doing business with the DoD will not immediately be required to possess CMMC certification, all new contracts and bids will require it as part of the bid process. The goal of the CMMC is to have all DoD contracts in the next five years obtain CMMC certification. If an organization is currently in a contract with the DoD, they should still be self-assessing against NIST 800-171, but preparing for the CMMC requirements.For new organizations looking to begin contracting with the DoD, they should start preparing using the draft CMMC framework that has been released.
We can help
Elliott Davis can assist organizations, both currently working with the DoD and aspiring to work with the DoD, in preparing for CMMC. Contact a member of our team to see how we can assist you with the CMMC process.
“Elliott Davis" is the brand name under which Elliott Davis, LLC (doing business in North Carolina and D.C. as Elliott Davis, PLLC) and Elliott Davis Advisory, LLC and its subsidiary entities provide professional services. Elliott Davis, LLC and Elliott Davis Advisory, LLC and its subsidiary entities practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations and professional standards. Elliott Davis, LLC is a licensed independent CPA firm that provides attest services to its customers. Elliott Davis Advisory, LLC and its subsidiary entities provide tax and business consulting services to their customers. Elliott Davis Advisory, LLC and its subsidiary entities are not licensed CPA firms. The entities falling under the Elliott Davis brand are each individual firms that are separate legal and independently owned entities and are not responsible or liable for the services and/or products provided by any other entity providing services and/or products under the Elliott Davis brand. Our use of the terms “our firm” and “we” and “us” and terms of similar import, denote the alternative practice structure conducted by Elliott Davis, LLC and Elliott Davis Advisory, LLC.