Joshua Duvall Published in Law360 Article - Opportunities for the Department of Defense to Improve Flexibility Under Proposed Cyber Rule
On February 21, Shareholder Joshua Duvall joined Sandeep Kathuria, an attorney at L3Harris Technologies, Inc., for a Law360 Expert Analysis on the U.S. Department of Defense’s recent proposed rule related to the most recent update to the Cybersecurity Maturity Model Certification program, also known as the CMMC.
Here is an excerpt from the article:
A significant effort to shore up supply chain cybersecurity by the DOD, it is anticipated that the CMMC program will apply to an estimated 221,286 companies in the defense industrial base when finalized and fully rolled out.
Briefly, the CMMC is designed to ensure full implementation of 110 security controls developed by the National Institute of Standards and Technology in Special Publication 800-171 Rev. 2, which has been incorporated in most DOD contracts through an existing regulation, Defense Federal Acquisition Regulation Supplement 252.204-7012.
While the CMMC undoubtedly is an important initiative — and one that the authors want to see succeed — the DOD should carefully address some of the more nuanced aspects of the CMMC program to avoid unintended consequences. In that respect, one maxim comes to mind: Perfection should not be the enemy of the good.
Check out the complete article here as a PDF or on Law360 (Subscription Required).
Related Materials
About Maynard Nexsen
Maynard Nexsen is a full-service law firm with more than 550 attorneys in 24 offices from coast to coast across the United States. Maynard Nexsen formed in 2023 when two successful, client-centered firms combined to form a powerful national team. Maynard Nexsen’s list of clients spans a wide range of industry sectors and includes both public and private companies.
