The American Bar Association’s Public Contract Law section is urging the Defense Department to consider allowing a plan of action and milestones for contractors to address ongoing compliance issues with the Cybersecurity Maturity Model Certification program, as the Pentagon works to finalize a rulemaking to change its acquisition regulations. “The Proposed Rule requires contractors to achieve, at time of award, a CMMC certificate or CMMC self-assessment at the level specified in the solicitation, or higher. This is understandable as part...
