As the first Cybersecurity Maturity Model Certification (CMMC) RFPs quickly approach, it is essential that organizations and companies shift gears to CMMC preparation. CMMC is not just about fixing a gap or implementing a control, it's about an organizational behavior, such as Practice Maturity and Process Maturity, which is essential for Level 3 and higher. 

Potomac Officers Club’s Fall CMMC Forum will feature Katie Arrington, Chief Information Security Officer at the Office of the Assistant Secretary of Defense for Acquisition and a 2020 Wash100 Award recipient, as a keynote speaker. She will analyze the meaning of “process maturity” and the concept of “evidence” of maturity.

During the forum, you will hear from additional federal and industry leaders who will discuss the requirements and priorities of implementing the certification, including scoping of CMMC assessments, supply chain impacts and C3PAOs. 

“I think that five years from now, it's part of a national standard, it's part of how we do business,” said Arrington in regards to CMMC integration.