Lawyers from two major law firms are flagging key aspects of the Pentagon's latest proposed rule to implement its Cybersecurity Maturity Model Certification program, with a focus on new requirements and other considerations for contractors. “The August 15 proposed rule supplements [the Defense Department's] December 2023 proposed rule by providing three components: (1) guidance to contracting officers, (2) a standard contract clause to be included in all contracts covered by the CMMC 2.0 program (DFARS 252.204-7021), and (3) a standard...
