CMMC

Conditional CMMC Status

A time-bound certification a C3PAO may issue when an organization scores at least 88 of 110 on its NIST SP 800-171 assessment but has open POA&M items on eligible controls. The conditional status is valid for 180 days; if all POA&M items are not closed and verified within that window the certification lapses, and the contractor loses eligibility for any DFARS 252.204-7021 award until reassessment.

The Authority Brief

One compliance analysis per week from Josef Kamara, CPA, CISSP, CISA. Federal and private compliance, written for practitioners.