In this video, industry experts Scott Edwards, Jacob Horn, and Stuart Itkin discuss the critical developments around CMMC (Cybersecurity Maturity Model Certification) and its implications for MSPs (Managed Service Providers) and the defense industrial base. They delve into the timeline of CMMC implementation, the challenges faced by MSPs in reaching compliance, and the potential market dynamics as the rulemaking process nears its conclusion. The conversation also explores the formation of the MSP Collective, a group aimed at advocating for MSPs within the regulatory landscape, highlighting the importance of collaboration and proactive engagement with regulatory bodies.
The Cybersecurity Maturity Model Certification (CMMC) is a Department of Defense program designed to ensure that defense contractors meet minimum cybersecurity requirements, aiming to prevent data loss from the defense industrial base.
The timeline for CMMC implementation is becoming critical, with historical data suggesting the final rule could be published by April 2025, but companies should act now to be assessment-ready within 12 to 18 months.
The MSP Collective aims to serve as a unified voice for Managed Service Providers (MSPs) to communicate with governmental bodies, ensuring that regulations take into account the specific needs and roles of MSPs in critical infrastructure.