Cyber AB Town Hall Wrap-Up: November 2022
As we are all preparing for the Holiday Season, the DIB remains kicked into high gear, preparing for the DoD’s anticipated roll out of CMMC and the Cyber AB is no different. Last week the Cyber AB (formerly CMMC-AB) and the newly created CAICO, held their 2022 Year-end Town Hall Finale. Since the first town hall was conducted, they have continued to contain valuable nuggets of CMMC news, updates, and changes in the CMMC ecosystem. In case you missed it, here are the major highlights and key takeaways from the Cyber AB’s 2022 Year-end Town Hall Finale.
Cyber-AB Updates
| Topics | Update Summary |
|---|---|
|
Website Improvements for 2022 |
|
|
Joint Surveillance Voluntary Assessments |
|
|
CMMC Practitioner Community (RPs, RPO’s & RPA’s) |
|
|
Draft CMMC Assessment Process (CAP) |
|
|
Cyber-AB Board of Directors |
|
|
Planned Website Improvement for 2023 |
|
CAICO Updates
| Topics | Update Summary |
|---|---|
|
Certified CMMC Professional (CCP) |
|
|
Certified CMMC Assessor (CCA) |
|
Cyber-AB Myth Busters
CMMC Myth 1
Myth:
The CMMC rules have been pre-designated for “Interim Final Rule” status, placing them on a faster track to be in effect for DoD procurement implementation after a 60-day public comment period.
Fact: Short Version
Short version, we do not yet know and are waiting for it to be announced.
Fact: Expert Version
The Office of Information and Regulatory Affairs (OIRA) with OMB, is responsible for publishing the Unified Agenda bi-annually (fall version & spring version). Each version of the Unified Agenda indicates the status of proposed rules. The next version of the Unified Agenda (fall version) is expected to be released on the OIRA website in the next couple of weeks. The fall version is expected to indicate whether the proposed CMMC rules will obtain a “Interim Final Rule” status or if they will go through the full rule making process. Below is a brief outline on how each status could impact the proposed CMMC rules.
Interim Final Rule Status: Achieving the “Interim Final Rule” status, will enable the DoD to fast track the roll out of CMMC.
Full Rule Making Status: Achieving the Full Rule Making Status will result in an extended rule making process that will prolong the DoD’s roll out of CMMC.
CMMC Myth 2
Myth:
One or more companies participating in the Joint Surveillance Voluntary Assessment Program have “failed” their assessment.
Fact: Short Version
This is a myth and is not true.
Fact: Expert Version
The Joint Surveillance Voluntary Assessments are conducted under “DIBCAC High” rules, which results in a numerical score. The “DIBCAC High” rules do not result in either a “pass / fail” or “met / not met” result. Given this, no companies participating in the Joint Surveillance Voluntary Assessment Program could have failed their assessment.
