The Defense Department is accelerating by two months its plans to implement changes to the Cybersecurity Maturity Model Certification program, with the release of two interim final rules now expected in March 2023 and requirements to start showing up in contracts 60 days after the rules are published under a three-year rollout plan. DOD is in the process of updating the original CMMC rulemaking which amended Title 48 of the Code of Federal Regulations. Following an internal review of the...