About this episode

The episode discusses GSA's updated cybersecurity requirements for contractors handling Controlled Unclassified Information and the differences from DoD's CMMC program.

GSA recently updated its cybersecurity requirements for contractors handling Controlled Unclassified Information (CUI). While similar in concept to DoD’s CMMC program, GSA’s approach is based on NIST SP 800-171 Revision 3, while CMMC currently relies on Revision 2. This difference could force contractors that work with both agencies to meet two separate cybersecurity standards. Industry experts warn that this may create a fragmented compliance environment across federal agencies and inc...

More episodes of CMMC Academy

• CMMC Compliance Roadmap & Resources · April 10, 2026 · 2 min
• What is CMMC · April 8, 2026 · 2 min
• Begin Readiness · April 8, 2026 · 2 min
• Navigating CMMC · April 8, 2026 · 2 min
• CMMC Ecosystem · April 8, 2026 · 2 min
• FPDS.gov Migration to SAM Introduction and Instructions · March 1, 2026 · 19 min

Explore listener stats, chart rankings, contacts and more on the CMMC Academy podcast page.