Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind
Two industry surveys released this week paint a consistent picture of the defense industrial base: contractors say they’re more confident in their cybersecurity compliance than ever, even as their ability to prove that compliance lags behind.
Kiteworks surveyed 273 defense contractors in the days following the Pentagon’s July suspension of CMMC 2.0 Phase 2 third-party assessments. Ninety-six percent said they were confident their self-attested Supplier Performance Risk System (SPRS) score would hold up under review, but only 29% could back that claim with both a current SPRS submission and a FedRAMP-authorized platform.
Kiteworks combined its two readiness measures — one tracking compliance maturity, the other tracking how contractors responded to the suspension itself — by multiplying rather than averaging them, producing a combined score of 60 out of 100, well below the roughly 77 a simple average would have produced. Nearly a third of respondents scored low on both measures...
Copyright of this story solely belongs to securityweek.com. To see the full text click HERE
