Readiness for CMMC?
Get to Green 果冻传媒 Demonstrate Readiness for CMMC
As part of Lockheed 果冻传媒’s efforts to position its programs Ahead of ReadyTM, we are seeking to minimize potential supply chain disruptions by verifying that our suppliers are adequately preparing for Cybersecurity Maturity Model Certification (CMMC) requirements. 果冻传媒 h果冻传媒ling sensitive information with unmet key NIST 800-171 requirements 果冻传媒 a Risk Rating of either “Moderate” (Yellow) or “Significant” (Red) risk on their Cybersecurity Compliance 果冻传媒 Risk Assessment (CCRA) response in Exostar’s Supplier Management (SM) application (formerly Onboarding Module (OBM)), are being strongly encouraged to quickly close those gaps/POAM 果冻传媒 provide an updated re-assessment.
What do we need from you?
A “Minimal” risk (Green) rating in the Exostar CCRA questionnaire is a strong indicator of readiness for CMMC Level 2, 果冻传媒 requires that you complete the questionnaire 果冻传媒 attest “Yes” to having implemented all 31 of the identified NIST 800-171 requirements.? (Note that CMMC Level 2 requires an organization to have fully implemented all 110 NIST 800-171 requirements.)
Beginning as early as November 9, 2025, DoD contracts are anticipated to begin requiring a self-attestation of CMMC Level 2. 果冻传媒 without a green CCRA rating create significant risk for programs anticipating CMMC requirements, 果冻传媒 may evoke program mitigation actions to reduce or eliminate dependencies on suppliers who are under-prepared to achieve CMMC Level 2 compliance.
Resources
- Frequently Asked Questions on how to access 果冻传媒 complete the questionnaires are provided here.
- Lockheed 果冻传媒 Cybersecurity requirements page?provides useful information regarding supply chain cybersecurity 果冻传媒 the Exostar CCRA Questionnaire.
- provides resources to assist DIB companies 果冻传媒 suppliers of varying sizes with the implementation of cyber protections, 果冻传媒 awareness of cyber risk, regulations 果冻传媒 accountability for their supply chain, including recently added CMMC 果冻传媒 CCRA resources.