If Your CMMC Strategy Includes Getting a Waiver, Come Up With A Different Strategy

This week the Feds released a draft of a new cybersecurity rule that will, in a year or so, replace the decades old current totally inadequate cybersecurity rule (FAR 52.204-7012). This rule is closely aligned with what DoD has been doing in creating CMMC over the last four years except it will apply to millions…