DoD to evaluate ‘external’ CMMC risks

A new GAO report found the Pentagon hasn't fully fleshed out the risks of relying on the private sector to implement the CMMC program.