January 09, 2026 – An audit by the U.S. Department of Defense Office of Inspector General (DoD OIG) has identified critical weaknesses in the Pentagon’s process for authorizing third-party organizations to conduct Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 2 assessments — controls that defense contractors and suppliers must obtain before winning certain DoD contracts.
The 2025 audit concluded that the DoD did not effectively implement the procedures designed to ensure that CMMC third-party assessment organizations (C3PAOs) meet all eligibility requirements before being authorized to assess contractors’ cybersecurity preparedness. That shortcoming, auditors warned, could undermine the confidence in the certification regime that is central to protecting…
more
Source www.reuters.com
FTC: We use income earning affiliate links. More on Sposored links.
Terms of use and third-party services. More here.
Terms of use and third-party services. More here.