Cybersecurity Dive October 1, 2025
A new survey illustrates the defense industrial base’s fragmented security posture.
Dive Brief:
- Barely any U.S. defense contractors say they’re fully prepared to comply with the Department of Defense’s new cybersecurity assessment program.
- Only 1% of companies say they’re completely ready to be assessed through the Cybersecurity Maturity Model Certification (CMMC) program, which takes effect on Nov. 10, according to a report that the managed security provider CyberSheath published on Wednesday.
- The percentage of respondents expressing confidence in their readiness has dropped over the past two years.
Dive Insight:
CMMC represents a major step forward for the Pentagon’s oversight of its contractors’ cyber defenses. Military officials began creating the program in 2019 in response to concerns that defense...







