The Pentagon is developing resources to train acquisition officials on setting requirements under its Cybersecurity Maturity Model Certification program, following the release of a final rule set to go into effect on Nov. 10. The final rule establishes a three-year timeframe where CMMC requirements will start showing up in defense contracts in a phased rollout. The rulemaking amends the Defense Federal Acquisition Regulation Supplement and was published Sept. 10 in the Federal Register. “We put out a lot of memos,...
