Alliance for Digital Innovation Comments on Cybersecurity Maturity Model Certification program Request for Information

The Alliance for Digital Innovation submitted comments in response to the Department of War’s Request for Information, “Reforming CMMC and Reducing Compliance Burden for the Defense Industrial Base.” The comments commend the Department for asking what this program truly costs the defense industrial base and how that compares to the security it is getting in return. The experience of ADI members converges on a single theme: The dominant cost of the CMMC stems from proving, repeatedly and manually, that controls already validated under other federal and commercial frameworks have in fact been implemented. The comments offer fifteen consolidated recommendation for potential action.