TWO recent surveys highlight growing confidence among defense contractors in their cybersecurity compliance, despite challenges in substantiating that confidence due to the Pentagon's pause on third-party assessments for the CMMC 2.0. The Kiteworks survey revealed that while 96% of contractors felt assured about their SPRS scores, only 29% could adequately validate their claims. Worryingly, many contractors were unaware that self-assessment requirements continued during the suspension.
The CyberSheath report indicated a increase in the average SPRS scores but a decline in contractors' confidence in the accuracy of those scores. There's a significant need among contractors for better verification processes and minimum cybersecurity standards, with many believing that compliance should be streamlined without compromising verification.