Ellen Lord, former chief of the Pentagon's acquisition office, says the Cybersecurity Maturity Model Certification program should move forward with a focus on incorporating improvements as it develops, while the Biden administration needs to help the effort by appointing her replacement. The program was launched during the Trump administration and is intended to improve the cybersecurity practices of the defense industrial base. CMMC moves the Pentagon into a "trust-but-verify" approach to examining how contractors handle controlled unclassified information. "My concern is that we are going to 'let perfect be the enemy of good enough' and we are going to have people pushing back and saying just stop that CMMC," Lord said Tuesday at a conference. She served as under secretary of defense for acquisition and sustainment through most of the Trump administration.
展开▼