Tracking the Rollout of CMMC

The Cybersecurity Maturity Model Certification (CMMC) is a framework that requires companies contracting with the Department of Defense (DoD) to meet security standards based on the sensitivity of the data they manage. These standards, based on the National Institute of Standards and Technology's (NIST) SP 800-171 standard, have been in place for eight years, but CMMC further formalizes compliance.

As of November 10, 2025, Defense agencies now require at least a Level 1 certification to award any new contract. To meet this requirement, companies must self-certify that they comply with 15 controls--specified by 800-171--that cover basic cyber hygiene. Next November 10 (in 2026), DoD will require that Level 2 status for contracts dealing with Controlled Unclassified Information (CUI), which currently can be self-assessed, be verified through a third-party assessment of compliance with all 110 controls in the NIST standard. Then in 2027, contracting officers can start requiring those seeking Level 3 certification to undergo an assessment by the Defense Industrial Base Cybersecurity Assessment Center. A Level 3 requirement would apply to technology dealing with highly sensitive data or systems, where a breach could have far-reaching impact. Continue reading

Securing Our Healthcare Infrastructure

We don't typically think of healthcare as infrastructure, but the functioning of our healthcare facilities is just as essential as that of our roads and utilities. Because of this criticality, healthcare systems require 100% uptime, a necessity that is vulnerable to the reality of cyber threats.

According to the FBI's Internet Crime Report, the healthcare industry reported 444 cyber-related incidents in 2024, the most out of any critical infrastructure industry. Despite this reality, many hospitals and health systems feel unprepared to respond and recover from these threats. The Travelers Risk Index survey found that only 51% of healthcare respondents were confident their organizations have best practices in place to prevent or mitigate a cyber event. Key challenges driving this lack of confidence include: Continue reading

How Technology Is Improving Citizen-Government Relations

When it comes to modernizing government, implementing new technology should not be the goal. The driver should be mission achievement improving service. Technology should not be the end solution, but an enabler of better processes.

With that in mind, we wanted to take a look at some of the buzziest technology solutions and see how they are enabling better citizen service.

Geospatial Data

A good deal of government service involves knowledge of a location. City, state, and federal governments need geospatial data to inform their work--from efficient emergency response to disaster preparedness and response, to the coordination of major events like Mardi Gras, marathons, and the upcoming World Cup and 2028 Olympics. Continue reading

A Look at Quantum Computing in the Public Sector

The acceleration of quantum computing from a theoretical to a functional reality is beginning to feel as fast as supercomputers themselves. This rapid pace of advancement brings a new urgency to preparedness. Agencies across all levels of government, as well as government-adjacent commercial organizations, are preparing for both the opportunities and risks introduced by a post-quantum world.

Federal

The 2026 National Defense Authorization Act (NDAA) includes 11 amendments related to quantum computing preparedness. The focus areas of these amendments include:

  • Mandating defense-specific strategy for quantum readiness.
  • Accelerating the implementation of quantum information science (QIS) technologies across Department of Defense (DoD) operations and missions.
  • Cultivating a workforce that is fluent in quantum physics-powered systems.
  • Examining the risk of quantum computing to GPS systems while also exploring how quantum sensor-enabled GPS technologies can be leveraged in department operations.
  • Establishing a Quantum Capabilities and Competition Office within the DoD to coordinate, lead, and direct the Department's quantum technology efforts.
  • Creating a Quantum Communications Corridor to serve as a network that connects certain defense installations, national laboratories, and universities working on DoD research.
  • Identifying what technologies that leverage quantum computing can be exploited by remote systems and could enable "offensive cyber operations."

Continue reading

Shaping the Federal Workforce of the Future

As the federal government continues to reshape the size and mission of government agencies, the Office of Personnel Management (OPM) and HR functions within agencies are reimagining how to manage the work of government.

Governmentwide Human Capital Management

With an eye toward efficiency, the OPM is looking for a way to streamline the management of human capital functions. The OPM estimates the federal government runs at least 119 human capital-management systems. These systems have limited interoperability, making it hard to get a full picture of the talent within the federal government. According to OPM Director Scott Kupor, the 44,000 HR professionals employed in government have to navigate "outdated and duplicative technology systems" as they look to build a workforce of the future.

The agency recently issued a request for proposals (RFP) for a single governmentwide human capital management (HCM) system. This system would be a single source of information on job titles, salaries, benefits, and employment histories, enabling full visibility into the federal workforce. With this visibility, hiring processes across agencies could be more consistent and streamlined. This change could also enable workers to more easily move between agencies into roles that are a match for their talent and goals, building a more flexible career path within government. Continue reading