SBA Office of Advocacy Cybersecurity Maturity Model Certification Program Small Business Impacts Roundtable

The next SBA Office of Advocacy Small Business Roundtable will be held virtually on March 12, 2026, at 11 AM MT.

In 2024, the U.S. Department of War published the final rules for the Cybersecurity Maturity Model Certification Program (CMMC). In 2025, the Defense Acquisition Regulation Supplement posted rules to incorporate this into all contracts. Advocacy filed comments stating that the Department underestimated the costs of compliance with the certification. Now that these terms have been implemented, Advocacy is hosting this roundtable to solicit insight from small businesses on their experiences with the CMMC program thus far. Specifically, Advocacy would like information on how much the certification process has cost, and the expected impact CMMC requirements will have on small businesses. We also seek to identify program improvements to reduce CMMC compliance burdens.

Please register and provide the information requested to receive a Teams link.