Final Preparations for Defense CMMC Requirements

After many months of delay, the Department of Defense has finalized the DFAR acquisition rule implementing the Cybersecurity Maturity Model Certification (CMMC) program to go into effect on November 10, 2025.

In this session, two C3PAOs, or CMMC Third-Party Assessor Organizations, and a leading technology managed service provider will share their perspectives on how to make the most of your limited time and resources implementing these technology investments. These contract language and cyber requirements will impact your ability to compete and team for design work in the federal marketplace. No matter where you are on your cybersecurity journey, you will learn practical insights from these technology leaders working with companies in the AEC industry.

Presenters:

• Tom Tollerton, Principal, Forvis Mazars
• Logan Therrien, Chief Strategy Officer, Kieri Solutions
• Neil Jones, Director of Cybersecurity, Egnyte