Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
Already have an account? Sign In »
1 hour 17 minutes
prepping for CMM. See, now
let's look at the timelines. This is probably
the most asked question that I have seen asked at workshops and I've been approached with is when is everything going toe happen?
Is it gonna happen?
Some people are skeptics saying, Oh, well, the D O. D wants it. But other things with the government have failed.
But let's look at the time lines.
So the D. O. D. Has created the C M. M. C A B accreditation body and everyone's asking, Where is version one?
The accreditation body the D. O D predicted would be put together by January 2020. And me, that was the biggest hallmark in the sea. MMC evolution
With the accreditation body, there is a board that has 15 positions.
14 have been filled
and as faras version one Right now, the draft version 10.7 is out, and version one is just around the corner.
The next question is, when is training certification going to be available
and following that is when is the assessor certification going to be available
and following? When are the assessments going to begin, and when will the notation of requirement of CME EMC certification start to appear on the RFP.
So let's look at this.
So January, the Sea MMC accreditation body has been established.
If you go to see MMC a b dot org's, you can see the structure. You'll see the 14 members that have been assigned to it, and you also see
the 0.7 draft is up there and as far as version one, that will be up as soon it is available.
So let's look at next about the training.
The training for the trainers and accreditation is going to be sometime in the spring. Some people think is soon as march. We have to wait to see when D. O. D makes all of that available and the C M M c A B will be the ones
issuing as far as the structure of the training
structure of the assessor.
Then the next part that we talked about, where is the assessments? Okay,
the trainings out,
the assessors have gotten their certification.
So when will the actual assessments begin?
And probably start to see ah, couple of the assessments begin in the summer Times of the d. O. D.
As far as what I can kind of see and trying to get this process out. They want to prove the process. So will they open it up to all the are of peas and everything out there? I don't think so. I think they're gonna have select one so that they can kind of walk through this process.
Make sure that the training, the assessors, the whole infrastructure
of the sea MMC accreditation body is solid. And then, hopefully by winner
later this year, they will start.
Aw, issuing as far as on the RFP the requirement to BC MMC certified
Now there's a lot going on with us and the d. O. D is in control off this time frame.
So this is a very rough outline of how
hopefully it will occur and the d o. D. Has to see
ticks her in the system. They want to make sure everything goes smooth. So that then when they finally put that requirement on the RFP
that everything is working smoothly. So the process of issuing contracts and the whole contract evolution is a smooth one, and they don't end up with the hose full problems with us, so please bear in mind
that the D. O. D.
Is trying to do the best they can so that in 2020 the whole CMM see workflow will be established and at least have a good base structure to work with. And again, if we kind of look back If you are a contractor,
be ready because it's not gonna be a flip of the switch for you to be able to be ready for when that assessor comes in.
If you are a company that is gonna be assessing or if you are going to be training,
be patient so that when it comes out you could be ready for but realize that there may be delays in this process as they firm up. This is a lot for the d. O. D. To put together Ah, whole new framework
assessment network, etcetera. That has to be out there.
So what? Formed in 2000? Warning to seeing that See MMC certification process in place