The DoD Said This Was "Out of Scope"... Now They're Asking About It

Episode notes

The DoD's CMMC Reform Task Force wants public feedback on how to reduce cost, complexity, and compliance burdens. There's just one problem. Many of the questions in the new RFI focus on topics the DoD previously said were outside the scope of the CMMC program, including NIST requirements, CUI policy, DFARS, FedRAMP, and other regulations. In this episode, we walk through each RFI question, explain what's actually part of CMMC, and discuss what realistic reform could look like under the rulemaking process. The RFI: Out of Scope comments:

Related episodes across the Index

Other episodes covering the same guests and topics, from across The B2B Podcast Index.

• CMMC Is an HR Problem, Not an Enclave Problem - Here's the ProofSecure Talk Podcast · on CMMC95 / 100
• Episode 128: Post Quantum CryptographyThe Azure Security Podcast · on NIST87 / 100
• Trump's Golden Post-Quantum EO(s)Security Cryptography Whatever · on NIST80 / 100
• AI and Cybersecurity in SMBs: Insights from Bruno LecoqSecuring the Realm · on CMMC79 / 100
• Rain Versus Flood, Making Sense of the 2026 CVE SurgeResilient Cyber · on NIST76 / 100
• Post-Quantum Cryptography: What Every Organization Needs to Know with Michael FasuloHacker Valley Studio · on NIST72 / 100

• The DoD's "Basic" Cybersecurity Isn't Basic at All93 / 100
• A Perfect SPRS Score Turned Into a $507K Settlement64 / 100
• CMMC Phase 2 Is Suspended... So Why Is the DoD Still Assessing Contractors?
• CMMC Phase 2 Is Suspended... But Contractor Liability Just Went UP
• Last Chance to Influence the FAR CUI Rule