A proposed rule to amend the Defense Department’s acquisition policies for the Cybersecurity Maturity Model Certification program has entered the Office of Management and Budget review process. The proposed rule is the second CMMC rule that is needed to formally launch the revamp of the defense program. It would amend Title 48 of the Code of Federal Regulations, which contains the government’s acquisition regulations. “DOD is amending an interim rule to implement the CMMC framework 2.0 in order to protect...
