Photo of Kate Growley

This week, the DoD announced the first group of pilot programs under the Cybersecurity Maturity Model Certification. Although still under review, these programs will likely be among a small group to issue solicitations in FY2021 that will require a CMMC certificate to be eligible for award. The DoD expects to identify eight other programs in the coming weeks, bringing the total number of FY2021 solicitations subject to CMMC up to 15. Each program is expected to require a Level 3 certificate for primes, and either a Level 3 or Level 1 certificate for every subcontractor, with limited exceptions.

U.S. Navy

·    Integrated Common Processor

·    F/A-18E/F/ Full Mod of the SBAR and Shut Off Valve

·    DDG-51 Lead Yard Services / Follow Yard Service

U.S. Air Force

·    Mobility Air Force Tactical Data Links

·    Consolidated Broadband Global Area Network Follow-On

·    Azure Cloud Solution

Missile Defense Agency

·    Technical Advisory and Assistance Contract

Tags: CMMC, DoD
Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Kate Growley Kate Growley

Businesses around the globe rely on Kate M. Growley to navigate their most challenging digital issues, particularly those involving cybersecurity, artificial intelligence, digital infrastructure, and their intersection with national security. Clients seek her guidance on proactive compliance, incident response, internal and government-facing investigations…

Businesses around the globe rely on Kate M. Growley to navigate their most challenging digital issues, particularly those involving cybersecurity, artificial intelligence, digital infrastructure, and their intersection with national security. Clients seek her guidance on proactive compliance, incident response, internal and government-facing investigations, and policy engagement. With a unique combination of legal, policy, and consulting experience, Kate excels in translating complex technical topics into advice that is practical and informed by risk and business needs.

Kate has extensive experience working with members of the U.S. government contracting community, especially those within the Defense Industrial Base. She has partnered with contractors from every major sector, including technology, manufacturing, health care, and professional services. Kate is an IAPP AI Governance Professional (AIGP) and a Certified Information Privacy Professional for both the U.S. private and government sectors (CIPP/G and CIPP/US). She is also a Registered Practitioner with the U.S. Cybersecurity Maturity Model Certification (CMMC) Cyber Accreditation Body (AB).

Having lived in Greater China for several years, Kate also brings an uncommon understanding of digital and national security requirements from across the Asia Pacific region. She has notable experience with the regulatory environments of Australia, Singapore, Japan, and Greater China—including the growing regulation of data flows between the latter and the United States.

Kate is a partner in the firm’s Washington, D.C., office, as well as a senior director in the firm’s consultancy Crowell Global Advisors, to which she was seconded for several years. She is a founding member of the firm’s Privacy & Cybersecurity Group and part of the firm’s AI Steering Committee. She has been internationally recognized by Chambers and named a “Rising Star” by both Law360 and the American Bar Association (ABA). She has held numerous leadership positions in the ABA’s Public Contract Law and Science & Technology Sections and has been inducted as a lifetime fellow in the American Bar Foundation.

Read more about Kate Growley
Show more Show less
Related Posts
CMMC Phase II Suspension Requires Reconsideration of Such Requirements in Solicitations
July 22, 2026
Department of War Immediately Suspends CMMC Phase II Requirements, Launches 60-Day Reform Review
July 22, 2026
Time for a Change: FedRAMP Fundamentally Revamps Program With Consolidated Rules for 2026
July 13, 2026