Stacy Bostjanick Retires, Leaving Legacy in CMMC Implementation

Stacy Bostjanick, a key figure in the development and implementation of the Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) program, will retire from federal service on April 30, 2026, after a 37-year career. Her departure marks a significant transition for the DoD’s efforts to secure its defense industrial base.

A Six-Year Tenure Leading CMMC

For much of the last six years, Bostjanick served as the chief of defense industrial base cybersecurity in the DoD’s Chief Information Officer’s office, guiding the CMMC program through its various phases of development and implementation. Her leadership was instrumental in establishing the program’s policy and procedures. [cmmcday.org]

Transition of Leadership

Buddy Dees, currently the director of the CMMC program management office, is expected to assume leadership of the defense industrial base cybersecurity program on an interim basis. [Federal News Network] Dees previously held positions as a nuclear command, control and communications portfolio manager within the DoD, as well as program management and analyst roles at SAIC and Harris. He too has experience at the Defense Information Systems Agency and the U.S. Air Force.

Bostjanick’s Extensive Career

Bostjanick began her federal career in 1989 as a secretary at the Naval Surface Warfare Center. She transitioned into contracting roles, holding several acquisition positions across the department, including Senior Contracting Officer at the Missile Defense Agency and Head of Contracting Activity at the Defense Intelligence Agency. [dodcio.defense.gov] At the Missile Defense Agency, she oversaw contracts exceeding $5 billion for missile defense systems. She also served as the Deputy Procurement Executive with the Office of the Director of National Intelligence, establishing Intelligence Community-wide policy.

Realignment for Program Integration

Recently, the CMMC team, under Bostjanick’s leadership, was aligned under the Deputy CIO for Cybersecurity to enhance integration with other Defense Industrial Base Cybersecurity programs. [war.gov] This realignment aims to streamline the rulemaking process and foster continued collaboration with industry stakeholders.

Recognition and Awards

Throughout her career, Ms. Bostjanick has received numerous accolades, including the Naval Meritorious Civilian Service Award, the David Packard Excellence in Acquisition Award, the Office of the Secretary of Defense Certificate of Appreciation, the Director of National Intelligence Award for Collaboration Leadership, the National Intelligence Meritorious Citation, and the Small Business Award.

Looking Ahead

Sources indicate Bostjanick is expected to transition to a role in the private sector following her retirement. As the DoD prepares for this leadership change, industry and government leaders will discuss evolving cybersecurity priorities at events like the 2026 Cyber Summit. Her legacy will undoubtedly continue to shape the future of cybersecurity within the defense industrial base.