Pentagon moves up timeline for release of interim final rules to implement CMMC program

By Sara Friedman / May 11, 2022 at 10:30 AM
The Defense Department is accelerating by two months its plans to implement changes to the Cybersecurity Maturity Model Certification program, with the release of two interim final rules now expected in March 2023 and requirements to start showing up in contracts 60 days after the rules are published under a three-year rollout plan. DOD is in the process of updating the original CMMC rulemaking which amended Title 48 of the Code of Federal Regulations. Following an internal review of the...

Not a subscriber? Sign up for 30 days free access to exclusive, behind-the-scenes reporting on defense policy and procurement.

Log in to access this content.