Back to today’s briefing

Story perspectives

CMMC Compliance Costs Threaten Defense Supplier Competition

2/20/2026

50 9 Full Breakdown

Summary

Story summary

The Cybersecurity Maturity Model Certification (CMMC), begun last November, requires self-assessments and audits.
Small defense suppliers face costs of hundreds of thousands of dollars, deterring participation.
Experts warn these requirements could reduce competition among suppliers.
International suppliers struggle with differing data privacy laws, complicating compliance, and the Department of Defense has not commented.

1 of 1

Story summary

The Cybersecurity Maturity Model Certification (CMMC), begun last November, requires self-assessments and audits.
Small defense suppliers face costs of hundreds of thousands of dollars, deterring participation.
Experts warn these requirements could reduce competition among suppliers.
International suppliers struggle with differing data privacy laws, complicating compliance, and the Department of Defense has not commented.