As DOD continues the roll-out of its Cybersecurity Maturity Model Certification program, both government acquisition professionals and the contracting community are scrambling to understand and implement the certification requirements.

A change to Defense acquisition rules last November kicked off new requirements for self-certification on security, strategy plans and reporting milestones. The General Services Administration also began including CMMC certification as a requirement in upcoming contracts, and DoD indicated it would offer CMMC reciprocity to FedRAMP authorized cloud providers to help mitigate the costs of new assessments.

In this workshop, Microsoft's Richard Wakeman discusses how to modernize your organization while maintaining CMMC compliance.