The Pentagon's officials overseeing the development of CMMC are planning to meet soon to address potential requirements for managed service providers under the program.

In a new report, GAO found that the DOD only met 78% of the 110 CMMC 2.0 requirements for systems that manage controlled unclassified information.

Depending on an interim rule, the Pentagon is hopeful to begin implementing CMMC controls in contracts in May 2023.

The Professional Services Council's David Berteau says that while industry waits for CMMC 2.0 rules to be issued, many contractors are already moving to come into compliance.