CMMC Enforcement Begins, Contractors Face Compliance Challenges

The Cybersecurity Maturity Model Certification (CMMC) has transitioned from planning to enforcement, impacting defense contractors significantly. Emil Sayegh, CEO of Cybersheath, notes that only 1% of contractors felt ready for compliance six months ago. There is now a rush among contractors to achieve CMMC certification, with enforcement manifesting through contracting friction and pressure from prime contractors. The Department of Defense (DOD) is starting to hold contractors accountable, leading to a shift in operational workflows. Contractors must provide evidence of compliance during assessments, moving beyond mere documentation. The situation highlights gaps between perceived readiness and actual compliance standards, as companies scramble to meet the new requirements.

Key Points: • CMMC enforcement is now active, affecting defense contractors' compliance efforts. • Only 1% of contractors felt ready for CMMC compliance six months ago. • Contractors must provide evidence of compliance, not just documentation.