CMMC Town Hall Updates
CMMC has been evolving since its inception, with the November 2021 reveal of CMMC 2.0 marking the most significant update (these changes can be found HERE). Since the reveal of 2.0, the CMMC Accreditation Board (CMMC-AB) has been holding regular Town Hall meetings to provide updates. In an effort to help navigate these changes and the impact to organizations, we have provided summaries of the meetings below.
While the April update did not reveal any significant changes, it is worth noting that there was mention that the rule enforcing CMMC will likely be implemented in July 2023. Voluntary assessments are set to begin in August.
During the Myth/Rumor Control section of the Town Hall, it was confirmed the proper terminology is "assessment" versus "audit," as recognized by both the DoD and ISO. Organizations are being assessed on whether they follow CMMC standards. Otherwise, this meeting did not offer significant news.
It was reported that organizations seeking Level 2 certification will now require third-party assessment. Level 1 organizations will still be able to self-attest.