Describe the important meaning of CMMC's certification from the perspective of it's development history, and explain the problems that Taiwanese manufacturers will face in fighting for US DoD's purchasing contracts.

In order to promote CMMC, the U.S. government has aligned a single goal of federal administration and legislatives. Starting with the President's announcement of the National Cyber Strategy, passing of various authorization bills by the Congress, clear division of work responsibilities for different departments and agencies, issuances of cybersecurity standards, reviewing and revision of related regulations, and intensive communication with the defense industry, culminating in the Department of Defense's formulation of a brand new framework and execution plan. It's overall implementation experience and progress is truly a worthy of lesson learned to us. However, the scale of the defense supply chain in Taiwan is far from the vast of defense industrial base in the United States. Therefore, in practice, it is necessary to think a collaboratively way for integrating government and private sector's resources, utilizing cost-effective approaches, overcoming various obsobstacles and establishing a constructive mechanism that can well meet the national cybersecurity needs of Taiwan. This requires collective brainstorming and exploration.

The Cybersecurity Maturity Model Certification (CMMC) program raises the standards for cyber protection for companies in the DIB. Designed to protect sensitive unclassified information shared by the Department of Defense with its contractors and subcontractors. The plan incorporates a set of cybersecurity requirements into procurement planning and provides DoD with additional assurance that contractors and subcontractors meet those requirements.

During this session, AIDC would like to introduce its role acted in defense industry. To share its experence on the process of introducing CMMC

In order to meet the requirements of our US customers, CF Precision has transitioned from the previous NIST SP800-171 standard to the CMMC. We now can be discussing why the CMMC is necessary to us, comparing what the previous certification methods, responding how we deal with certification changes, and sharing the relevant experiences about the subsequent direction of execution.