Hearing on Cybersecurity Requirements for Small Business Contractors
January 1, 2021
Track this bill to get notified when it advances a stage. One tap to stop, anytime.
The Frame
Small businesses that contract with the Department of Defense may face new, mandatory cybersecurity compliance costs and technical requirements to maintain their eligibility for federal contracts.
Potentially affected actors named in the source documents. Mention is not a position.
Small business defense contractors
These businesses must comply with new cybersecurity certification standards to remain eligible for Department of Defense contracts.
Department of Defense
The agency is responsible for implementing and enforcing the CMMC framework across its supply chain.
Last recorded activity January 1, 2021.
Next step not available in the current record.
Summary
Why It Matters
Small businesses that contract with the Department of Defense may face new, mandatory cybersecurity compliance costs and technical requirements to maintain their eligibility for federal contracts.
Key Facts
- The hearing was held on June 24, 2021, by the House Subcommittee on Oversight, Investigations, and Regulations.
- The Department of Defense is implementing the Cybersecurity Maturity Model Certification (CMMC) to protect sensitive defense information.
- The Council of Economic Advisers estimates malicious cyber activity has cost the U.S. economy between $57 billion and $109 billion since 2016.
- The hearing included testimony from four witnesses representing legal, cybersecurity, and small business contracting perspectives.
- The subcommittee discussed the potential for CMMC requirements to create barriers to entry for small businesses in the defense industrial base.
Frequently Asked Questions
What is CMMC?
Why is this relevant to small businesses?
News Coverage
Sponsors
Show 1 more sponsor
Discoveries
Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.
Increased focus on supply chain security
The hearing highlights a shift toward mandating cybersecurity standards for all tiers of the defense supply chain, rather than just prime contractors.
Connected Entities
Sources
www.govinfo.gov
Analysis Score
0–100- Significance75How much this matters to a regular citizen
- Controversy40Intensity of disagreement among stakeholders
- Entertainment10Compellingness for a non-policy-wonk reader
- Buzz20Current news / social attention level
Publisher tools