The DoD's CMMC Review Has a Scoping Problem

The DoD says Brilliant at the Basics will reduce cybersecurity compliance costs and administrative burden. But its new guidance leaves a critical question unanswered: What's actually in scope? We examine all 10 IT security practices, compare their language with NIST SP 800-171 and CMMC's existing scoping rules, and explain why eliminating administrative complexity could actually make compliance more expensive for defense contractors. Brilliant at the Basics: https://dowcio.war.gov/BrilliantBasics/ Phishing Resistant MFA: https://youtu.be/7aMxKNNlOxo?si=wJ8XA97UB26oZJPJ CMMC Scoping: https://www.ecfr.gov/current/title-32/section-170.19