On Oct. 11, 2024 the Defense Department issued the final rule to formally establish the Cybersecurity Maturity Model Certification program, and scheduled it for publishing in the Federal Register the following Oct. 15 with 60 days until it goes into effect.