Marsh launches DOD cybersecurity certification program

Marsh said Wednesday it has launched its Cybersecurity Maturity Model Certification Program to help organizations that contract with the Department of Defense simplify compliance with forthcoming certification standards.

Marsh said it collaborated with select CMMC-focused vendors and cyber insurers to create the program to help DOD contractors identify cybersecurity tools and services that meet CMMC requirements.

Those that achieve compliance will be eligible for enhanced cyber insurance coverage from participating cyber insurers, Marsh said in a statement.

The CMMC rule, set to become effective later this year, is designed to enforce the protection of sensitive unclassified information shared by the DOD with its defense industrial base, which consists of more than 100,000 contractors and subcontractors.

The CMMC rule will require contractors to implement up to 110 cybersecurity controls depending on the type and sensitivity of the information, over a three-year period. Compliance with CMMC is mandatory for DOD contract awards, the statement said.