CMMC Needs to Adapt to Evolving Cyber Threats

Katie Arrington, Performing the Duties of the DOD CIO
According to officials, the Defense Department’s Cybersecurity Maturity Model Certification (CMMC) program is a national security imperative to protect intellectual property and maintain an American competitive advantage in defense technology.
At AFCEA TechNet 2025 in Baltimore, Katie Arrington, performing the duties of the DOD CIO, says CMMC needs to adapt dynamically to evolving cyber threats. With evolving tech like AI and quantum, acquisition rules need to adjust to evolving technologies while maintaining security standards. Arrington says that the Defense Department needs to continue to streamline cyber requirements through required standards, guidance and executive orders.
She also discusses the need for a cultural shift towards continuous cybersecurity, the new Software Fast Track Initiative and baking cybersecurity into all DOD functions.

-
Katie Arrington Performing the Duties of the DOD CIO
-
AI Enables Coast Guard’s Workforce to Transform Operations
The Coast Guard’s Deputy CIO Brian Campo delves into the ways AI is pushing the service to rethink its core services, workforce and operations.
14m watch -
New Army Acquisition Plan Cites Autonomy, Predictive Analytics
Officials outline how the Army Transformation Initiative signals a broader shift toward efficiency with tech and acquisition reform.
4m read -
DOL Turns to Workforce Development to Maintain AI Superiority
DOL is bridging the AI skills gap through partnerships and upskilling to ensure future AI workforce readiness.
10m watch -
Trump’s Executive Order Spurs Federal Push for AI Literacy
Agencies are ramping up AI literacy efforts across the federal workforce and education systems after Trump's executive order on AI education.
5m read