DoD Warns Against Third-Party CMMC Fraudsters

The Department of Defense has warned its supply chain contractors against third parties offering fraudulent Cybersecurity Maturity Model Certification. Ellen Lord, undersecretary for acquisition at the Department of Defense and a five-time Wash100 awardee, said no entity currently has the authority to grant CMMCs as the third-party assessment organization has not yet been finalized, MeriTalk reported Monday.

Defense contractors currently do not require CMMCs for requests for information until June 2020 and for requests for proposals until September 2020. 

Only DoD materials or presentations will convey the department's position on CMMCs, Lord said in a National Defense Industrial Association statement.

DoD reportedly plans to soon ink a memorandum of understanding on the CMMC accreditation and approval process for the agency's supply chain.