CMMC: To be or not to be

Michael Gruden, partner at Steptoe LLP, joins Off the Shelf for the latest on cybersecurity and government contracts compliance. The conversation focuses on “CMMC to Be or Not to Be” where Gruden provides his insights and assessment of the CMMC journey to date and in the future. He outlines the considerations playing into the CMMC pause and what he expects moving forward.Gruden also shares some best practices for cyber compliance across the federal contracting landscape, and he give his thoughts regarding the Revolutionary FAR Overhaul (RFO) and the new Controlled Unclassified Information (CUI) guidance in FAR Part 40. Finally, Michael talks about Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) rule making and what can be expected.  See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.