New cybersecurity rules for U.S. defense industry create barrier for some small suppliers

New U.S. cybersecurity rules for the defense sector are leading some small suppliers to rethink military work due to high compliance costs, raising production risks at a time when the Trump administration ‌is pressuring contractors to boost output and diversify the supply base.

The Defense Department’s long-delayed U.S. Cybersecurity Maturity Model Certification started last November ‌to protect sensitive information, known as controlled unclassified information.

Companies working on federal contracts now perform cybersecurity self-assessments as the first of three CMMC levels, with the more stringent second level ​that includes audits expected to begin by November.

Read more at Reuters