NIST will help create CMMC standards for thirdparty assessors

The National Institute of Standards and Technology will play a “core” role in setting standards for third-party assessors to participate in the Defense Department‘s new Cybersecurity Maturity Model Certification (CMMC).

While NIST will be critical in creating those standards that organizations will have to meet to become a third-party assessor for the cybersecurity certification process, the governing CMMC accreditation board will have the ability to “modify” them, Katie Arrington, the CISO for the DOD acquisition and sustainment and top CMMC official, said Wednesday.

Read on fedscoop.com