Cindy Kaplan2024-07-03T19:13:38+00:00Categories: Duty of Care Risk Assessment (DoCRA), Governance & Risk Management, Reasonable Security | Reasonable Risk, Risk Assessments, Third-Party Risk & Vendor Risk Management|Tags: C3PAO, CMMC, contractor, CUI, cyber security certification, Cybersecuritymaturitymodelcertification, DepartmentofDefense, DoD, government, maturity, NIST, POAM, SPRS, third party|