No CMMC Penalty for SolarWinds Hack

While the Cybersecurity Maturity Model Certification system was being rolled out over the same time period that the SolarWinds breach was affecting agencies and contractors, Katie Arrington, CISO for the Office of the Undersecretary of Defense for Acquisition and Sustainment, says that companies compromised by the incident will not be penalized for falling victim to hackers.