CMMC Requirements for MSPs Serving Defense Contractors
An MSP serving defense contractors does not automatically need its own CMMC certification. The decisive question is what the MSP actually does with Federal Contract Information (FCI), Controlled Unclassified Information (CUI), and Security Protection Data (SPD), and whether the provider is functioning as an MSP, another type of External Service Provider (ESP), or a Cloud … Read more