"The CMMC program is just a certification program on top of the security controls that are still required and will be required," said Eric Crusius.

© U.S. Navy/Rick Naystatt

The first two airports have elected to participate in TSA's "Gold+" initiative, which allow private contractors to manage both staff and technology.

© The Associated Press

The CMMC review could lead to "everything from an overhaul, to small tweaks here and there,” DoD CIO Kirsten Davies said after the review team's first meeting.

© Amelia Brust/Federal News Network

"As tech is being developed and as tech changes, the development changes quickly and companies are interested in getting to market," said Alex Hastings.

© The Associated Press