Bottom line: US defense contractors may need to reevaluate their CMMC Phase I scores due to concerns over data quality.
What's happening: The CMMC Phase I scores have been reported to be at an all-time high, with scores ranging from 84% to 100%, according to the latest data from the CMMC Authority. Notably, the scores of major defense contractors like Lockheed Martin, Northrop Grumman, and Boeing have reached 95%, 94%, and 93%, respectively. However, some contractors, such as L3Harris, have reported scores as low as 82%.
What to do: Security leaders should review their CMMC compliance and assess the accuracy of their scores, considering factors such as data quality and methodology, to ensure they are accurately representing their organization's cybersecurity posture.