The Pentagon's rulemaking to implement its Cybersecurity Maturity Model Certification program has completed the Office of Information and Regulatory Affairs review process, a major milestone that indicates the new regulation should show up in the Federal Register soon. The Defense Department announced major changes to CMMC in November 2021 and a process to go through rulemaking to implement them. In an advanced notice of proposed rulemaking, DOD said the number of CMMC levels will be reduced from five to three...
