Katie Arrington Urges AI-Led CMMC Reviews, SBA Cyber Loans for 99.9% of US Firms

1 articles · Updated · Nextgov/FCW · Aug 17

Arrington said CMMC’s final rule should stay intact, but AI should handle first-pass reviews of controlled unclassified information to better match assessment burdens with actual data exposure.
Manual CUI judgments now vary across similar contractors, she argued, leaving some small suppliers overburdened while others handling sensitive data face lighter requirements that miss real risk.
For the broader economy, she called for a dedicated SBA cybersecurity loan program, saying training grants alone cannot finance ransomware recovery, endpoint detection, MFA rollouts or quantum-resistant encryption upgrades.
Small businesses make up 99.9% of U.S. companies and employ nearly half the private workforce, making stronger cyber financing a national resilience issue beyond the defense industrial base.

Sources

Center100%

How will 100,000 small defense contractors survive billion-dollar cybersecurity mandates without going bankrupt?

Will the temporary pause on defense cybersecurity rules accidentally expose military secrets to aggressive adversaries?

Could using artificial intelligence to protect defense supply chain data actually trigger a massive information leak?

1 total

Center100%