The final Cybersecurity Maturity Model Certification rule is still months or maybe even a full year away, but the heart of rule will not change: standard 800-171 from the National Institute of Standards and Technology.

In this episode, Fortinet's federal chief technology officer Felipe Fernandez tells Editor Nick Wakeman that companies should focus their efforts around the standard shaping the rule regardless of how CMMC evolves.

Companies have checklists and questionnaires available to them for use before they go through a third-party assessment. For those that prepare early, there may be an opportunity to separate themselves from competitors.

Fernandez shares insights on that preparation and more as he and Wakeman dive into CMMC as it moves through the rulemaking process.