Pentagon plans to publish CMMC 'interim rule' by May 2023

By Sara Friedman / April 8, 2022 at 10:20 AM
[Editor's note: This article has been updated to clarify how the waiver process will work, based on additional information from the Defense Department.] CMMC director Stacy Bostjanick says the Pentagon is planning to release the “interim rule” to implement its Cybersecurity Maturity Model Certification program by May 2023, with initial requirements showing up in DOD contracts 60 days after the rule publication. “The CMMC team is in Groundhog Day because now we have to go through the 32 CFR...

Not a subscriber? Sign up for 30 days free access to exclusive, behind-the-scenes reporting on defense policy and procurement.

Log in to access this content.