CMMC Needs to Adapt to Evolving Cyber Threats

Katie Arrington, Performing the Duties of the DOD CIO
According to officials, the Defense Department’s Cybersecurity Maturity Model Certification (CMMC) program is a national security imperative to protect intellectual property and maintain an American competitive advantage in defense technology.
At AFCEA TechNet 2025 in Baltimore, Katie Arrington, performing the duties of the DOD CIO, says CMMC needs to adapt dynamically to evolving cyber threats. With evolving tech like AI and quantum, acquisition rules need to adjust to evolving technologies while maintaining security standards. Arrington says that the Defense Department needs to continue to streamline cyber requirements through required standards, guidance and executive orders.
She also discusses the need for a cultural shift towards continuous cybersecurity, the new Software Fast Track Initiative and baking cybersecurity into all DOD functions.

-
Katie Arrington Performing the Duties of the DOD CIO
-
Federal AI Infrastructure Requires a Smarter Foundation
Federal AI depends on a smarter infrastructure, from managing environmental impacts to improving data quality and workforce readiness.
4m read -
Accelerating Federal Cyber Resiliency in IT Modernization
Rear Adm. Chad Cary says his agency integrates emerging technology and systems to enhance marine domain awareness.
15m watch -
NOAA Secures the Seas with AI and Autonomy
Rear Adm. Chad Cary says his agency integrates emerging technology and systems to enhance marine domain awareness.
10m watch -
GSA Positions Itself as a Federal AI 'Enabler,' CAIO Says
CAIO Zach Whitman says the agency is focusing on "grounded practicality" in AI adoption throughout government.
5m read