Final Preparations for Defense CMMC Requirements

After many months of delay, the Department of Defense has finalized the DFAR acquisition rule implementing the Cybersecurity Maturity Model Certification (CMMC) program to go into effect on November 10, 2025.

In this session, two C3PAOs (CMMC Third-Party Assessor Organizations) and a leading technology provider whose clients have successfully completed their CMMC assessments will share their perspectives on how to make the most of your limited time and resources as you implement CMMC’s requirements. These contract language and cyber requirements will impact your ability to compete and team for design work in the federal marketplace. No matter where you are on your cybersecurity journey, you will learn practical insights from these technology leaders working with companies in the AEC industry.

Learning Objectives:

• How to prepare for your assessment
• The CMMC assessment process
• Timeline for CMMC’s rollout and when your contracts will be affected
• Requirements for the Cloud Services Providers (CSPs) and Managed Service Providers (MSPs) that you engage with

Presenters:

• Tom Tollerton, Principal, Forvis Mazars
• Logan Therrien, Chief Strategy Officer, Kieri Solutions
• Neil Jones, Director of Cybersecurity Evangelism, Egnyte