The Department of Defense’s Cybersecurity Maturity Model Certification program. This program may once again face delays. In the meantime, defense contractors that handle Controlled Unclassified Information are required to implement the security controls in NIST SP 800 171.