CMMC Updates from Tego

CMMC Updates from Tego

As a Registered Practitioner Organization (RPO), Tego stays up-to-date on the changing guidance surrounding CMMC. We attend periodic CyberAB Town Hall meetings and leverage our extensive network of compliance professionals to learn more about the changes that impact the CMMC compliance process. 

Here are a few updates from the latest Town Hall meeting:

  • It is more important for contractors that have implemented 171 to go for a Joint Surveillance Voluntary Assessment (JSVA). The assessment requires 80% compliance to pass, with a 4-year validity for CMMC certification. 
  • Utilizing an RPO is still a recommended course of action to prepare for a JVSA and CMMC compliance. 
  • There will be a phased approach once rule-making is complete; not all contracts and recompetes will require CMMC immediately.
  • DoD rule-making is still slated to be complete by May. Once complete, it has to be sent to the Office of Information and Regulatory Affairs (OIRA), who will typically review it within 3 months. Once OIRA has reviewed, it is sent out for public comment. The public has 60 days to comment. The DoD will have to respond following public comment, unless the rule is issued with Interim Status.
    • Given that it is March and the DoD has not sent the rules to OIRA, we expect the best case scenario to be June 2023 for public comments to start.
    • It is likely that the phased requirement will start mid-Q4 at best unless the rule is designated with Interim Status.
    • Interim status means that the cybersecurity standards will be implemented temporarily until a final rule is complete, allowing the DoD to enforce the standards while also allowing for public input and refinement before the final rule is implemented. The current minority consensus is that the rules will be published and granted interim status.

What does Interim Status mean?

If the CMMC rule making process is given interim status when it is complete, it means that the CMMC requirements and guidelines will be implemented on a temporary basis until a final rule is developed and put in place.

  • Interim status is typically granted when there is an urgent need to implement new regulations or guidelines, but the rule-making process is not yet complete. In the case of CMMC, interim status would allow the Department of Defense (DoD) to require contractors to demonstrate compliance with the CMMC cybersecurity standards while the final rule making process is being completed.
  • Interim status may include a period of public comment and feedback, which can be used to refine and improve the final version of the rule. The DoD would then use the feedback to develop a final rule that would replace the interim status requirements.
  • Granting interim status for CMMC rule-making means that the cybersecurity standards will be implemented temporarily until a final rule is developed, allowing the DoD to enforce the standards while also allowing for public input and refinement before the final rule is implemented.

The above information can be overwhelming when attempting to determine next steps with CMMC. Tego’s Advisory Services team can address your questions and concerns about CMMC. Contact us today to begin your CMMC journey and to learn more about what the process means for your organization.

Security
About the author
Jennifer Vosburgh
Jennifer Vosburgh is a seasoned Marketing and Communications professional. With over 15 years of experience, she has a strong background in Marketing, Communications, and Event Management. As Vice President of Tego Data Systems in Raleigh, NC, Jennifer is responsible for delivering full-scale Marketing Campaigns across all platforms including website, email, social media, events, and more.

Testimonials

  • Working with Tego has been great. They helped us deploy our new SAN at a critical time so that we were be able to help one of our biggest customers with some performance testing. Their knowledge and attention to detail was critical. It has been a pleasure working with them. — Paul Silveira Sensus Utility

  • We have worked with the folks at Tego even before they were Tego Data. In our business there is no room for downtime and over the years the folks at Tego have helped us design, implement and subsequently upgrade our storage infrastructure several times, under very stringent high availability requirements, without issue. — Ted Boggs Duke University

  • Due to an aging infrastructure we were running into a lot of problems backing up our data out of state. The Tego Data team came in and helped us upgrade our environment and set up replication to Austin TX. They have a very knowledgeable and attentive team and we are happy to be working with them! — Gary Tummond Clerk of Court, Indian River County

  • When we had a major production issue, one even the equipment vendor couldn’t resolve in a timely manner, the Tego team was able to respond quickly, help us fix the problem and get us back up and running. Nolan (Tego Engineer) really saved my bacon. — Scott McMullan Symphony Health Software

  • Tego always provides me excellent sales and support services and has done so for as long as I have been doing business with them, about six years. — David C. Channell Liggett Group LLC Manufacturing

  • Having Tego involved and using cloud services gives us peace of mind. We don’t have to pause day-to-day project management to make software updates, which gives us extra time we didn’t have before to work on other strategic issues critical to the business. — Mathew Price Stewart Engineering

  • We have been working with the team at Tego Systems for 6 years now. They have helped us design and implement our NetApp infrastructure which has worked flawlessly to keep our data protected and available. — Michael N. Lee Putnam Valley Central Schools Education

  • The Tego Team has been a great partner to work with over the last several years. Together we developed a disaster recovery solution which fit our needs and budget. We look forward to continuing our relationship with Tego Data in the years to come. — Paul Murray Thomas H Lee Capital LLC Private Equity

  • We recently upgraded our NetApp environment and moved to cluster mode. Tego helped us design the solution and their engineering staff provided superb support and mentoring during implementation. This was our fourth successful NetApp implementation with the Tego Team. — Robert Troxel Maiden Global Servicing Company Insurance

  • We have been working with the team at Tego for 6 years. They have helped us architect our NetApp storage infrastructure and disaster recovery strategy. When we had a water main break in our data center last year we realized very quickly just how critical good technology and an experienced, responsive partner can be. — Don Shiffett Ober Kaler Law

  • Tego is a world-class IT solutions provider. Their engineers and consultants are senior experts only interested in ensuring their partner institutions get the solutions they need to build an infrastructure today’s students expect from a college or university including post-traditional adult students. From managed services to digital transformation to cloud services and data security, Tego Data has the solutions and services colleges and universities can trust to improve enrollment and student digital experiences. — Dr. Karen Srba former VP of Academic & Instructional Technology American Public University System

Accept

By using this website you agree to our updated Conditions of Use and consent to the collection and use of your personal information as described in our updated Privacy Notice, which includes the categories of data we collect and information about your preferences and rights.