Cyber AB Tips the CAP for Level 2 Certifications Process

Dentons
Contact

Dentons

Cyber AB Tips the CAP for Level 2 Certifications Process
As the Department of Defense (“DoD”) continues its efforts to establish the Cybersecurity Maturity Model Certification (“CMMC”), version 2.0, The Cyber AB, formerly known as the Cybersecurity Maturity Model Accreditation Body, recently released a pre-decisional draft of the CMMC Assessment Process (“CAP”) at the end of July. While not yet endorsed by the DoD, contractors can and should familiarize themselves with the proposed process for assessing the implementation of cybersecurity measures.

CMMC 2.0 is expected to have three levels for certificates: Level 1 (foundational) for contractors handling Federal Contract Information (“FCI”); Level 2 (advanced) for contractors handling CUI; and Level 3 (expert) for contractors handling the highest priority programs with CUI. The draft CAP currently is structured to apply to CMMC Level 2 certifications. 

The draft CAP describes the CMMC doctrine and provides the overarching procedures and guidance for CMMC Third-Party Assessment Organizations (“C3PAOs") that will assess organizations seeking CMMC certification.

The draft CAP provides four phases for the assessment:

  1. Plan and Prepare the Assessment
  2. Conduct the Assessment
  3. Report Assessment Results; and
  4. Close-Out Plan of Action and Milestones (POAMs) and Assessment.

C3PAOs will begin conducting four voluntary assessments, using the draft CAP, starting this month and next (the weeks of August 22, August 29, and September 12) – a joint surveillance voluntary assessment.  While rulemaking is still underway and voluntary assessments occur, the release of the draft CAP leaves contractors with insight as to the process that should help them successfully satisfy the CMMC Level 2 requirements.

A copy of the draft CAP can be found here.

Written by:

Dentons
Contact
more
less

Dentons on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.